This is bad because who ever controls the keys controls the coins. So really for all these clueless users, the exchange owns all the coins and you can’t prove o

This is bad because who ever controls the keys controls the coins. So really for all these clueless users, the exchange owns all the coins and you can’t prove otherwise. And they don’t bother educating the user. Or suggesting best practice. That’s not in the users favour.