I 100% believe that no exchange boss would want their WEB3 wallet to be insecure, but the developers coding the wallet might not feel the same. These people are super smart, and when they see the boss making so much money, they feel unbalanced. Leaving some vulnerabilities is way too easy, and these vulnerabilities can't even be caught in audits.