I think for a place of exchange there is nothing more important than a security system than a place of exchange, traders only want their assets to be safe so that it must be an important task for all places of exchange.
Security is the most important but we users does not know how secure the site really is, only the team behind the exchanges knows, of course they will guarantee that they have the safest exchange but even big exchanges like Binance is not hack proof so we cannot be confident on that.
I think in order to protect the users o the exchange, they need to set some insurance for the accounts if it will be hack so users accounts will not be affected, just like what SAFU funds of binance did, but if exchange is not as big as Binance, then maybe they can find an insurer to insure their site.
We do like the idea on that insurance thing for exchangers yet this will build up some confidence into its users yet no exchange is hack-proofs as you said.
Even the best ones have been exploited out which mean all exchangers do really have the risk.
The thing here is that its hard to consider on having an insurer or some will built up this thing yet they do know on how big is the damage would be dealt if there are
a certain hack happened.No business nor legal firms will tend to jump in to this matter.