Don't expect all cryptocurrency exchange to be same when it come to it security, some had the money to use while others don't. Mostly, the exchange we should be afraid of are the new cryptocurrency exchange and not some old exchange that has good reputations when talk about security. The likes of Binance and other good exchange should be embrace and use.
The problem occurs with emails mainly in my opinion as people are sent lucrative offers via emails and those who are new clicks on it to go into the world of hackers where they will ask you to login and you are basically giving away your money and account to them.
The root of the problem is how the hackers are getting your email id and that is via airdrops and various other sources so just make sure the email you use for exchanges and accounts you never use the same emails for airdrops and other activities.
You need to safeguard your money and no one else is going to do it for you, so be smart and firstly, don't make your email known to hackers and if even somehow they do, make sure you check the web address thrice before putting data.