Bitcoin supports "cold storage" which is effectively a wallet that can receive funds, but is offline so you cannot transfer funds out of it. That is, the private key is stored offline.
There is really no excuse for exchanges not using cold storage.
There is really no excuse for exchanges not using cold storage.