Exactly !
Problem is not in wallets ( usually), and not in code
Problem is in humans.
Once I transfer to exchange - all I can do is trust in human ( in exchange owners, coders, manger etc etc)
There will be always an insider problem, greed problem etc, and always in the form of human.
There is not even one single human on this planet, who I trust as much as I do in strength of SHA256 hashing. Period.