How is a hardware wallet safer than an exchange if you can lose your passphrase, it can break, be lost or stolen? A unique email address, strong password and 2-Factor Authentication seem preferable. Funds on exchanges are often kept in cold storage.
valid question