If user can't be bothered to learn anything or read anything or accept months-pending Windows update, he should not touch cryptocurrency.
So, for the "average user", the answer is not storing on an online exchange, but to never touch cryptocurrency in the first place.
Nobody argues that the only safe place to keep your money is in a safe in your basement, what's up with the crypto world where the advice is reversed?
But it can be used wither way. What matters is the freedom to chose.
Yes, I know the theory but saying this 10000x times does not change the fact that for some use cases, it might be the wrong decision. I feel the crypto community is WAY too dogmatic about this.
The beauty of the way cripto is working is that it can be both ways. You can control your keys as much or as little as you want.
If things were the way you say, crypto would not be what it is today. Simply wishing that things were this way or say that they're "using it wrong" feels silly to me.
https://old.reddit.com/r/ledgerwalletleak/
Doesn’t help that almost everyone recommended buying direct as the safe choice to avoid fraudulent devices and/or unscrupulous vendors leaking their buyers...