While I think you're absolutely right in general, there are a few exchanges that are registered as serious financial institutions, which means they need to follow stricter regulation and actually back 100% of their user's assets. As far as I know at least Coinbase and Bitstamp are among these.