No one ever said that a centralized crypto exchange can't get hacked (or stolen from) even if the coins traded on it are decentralized. Not your keys, not your coins.

Edit: Downvoted for simply stating facts.