So what ? It's not the first time it happened with Coinbase, and probably not the last
"Hot Wallets" can be hacked, because they're connected to the whole system. "Cold Wallets" are offline, and require human intervention to transfer money into and/or out of.
Figuring how much money to keep in the "Hot Wallet" is a tradeoff in services, convenience, and security.
And yes, it is to Coinbase's discredit that they haven't done so, but (assuming you're not joking), they could very well not be at that stage. It's typical for startups to have technical debt like that.
In this way, scaling often gives you an order of magnitude or two of available additional capacity, but periodically requires new dev work to support further increases.