Why would you assume that it's rare to have it outside of an exchange/custody provider? For that sum I'd expect most operation to have most of them in their own wallets.