The only thing I don't like is how people nowadays just assume that an exchange wil reimburse them in case there is a hack or other forms of coin loss. It's almost seen as a form of insurance.
The last few exchanges that were hacked are planning to do the same as far as I know, and that comforts people too much. It's great that exchanges do this and it's the only right way, but it's not guaranteed to happen.
You said it! It's one of the reasons why some people are using exchanges in a laid back attitude, like nothing can go wrong. This is not hacking but coinsmarkets.com run away with their user's money, apparently despite being new (registered in 2017-03-09) people still deposited huge amounts of money. Risk assessment/precautionary measures shouldn't be optional but obligatory.
There must be a better way or strategy to reduce the risk for people to lose large amounts of money, when these exchanges gets hacked.
Others have already suggested some of it which is surprisingly what I do too but I believe the most crucial part of these is picking an exchange, it starts with that.
Before we assume the hacking, let's first assess the odds of it happening first. Pick an exchange where there's a low chance; competent.
Then again these measures isn't something that guarantees your fund's safety, it will only alleviate risks.