Third option would also be actual negligence which is an interesting case because people are used to dealing with banks and do not realize that they will not get their money back. Im not suggesting FDIC style protection for Bitcoin exchanges is a good idea, but that is just what people are conditioned to expect and I think that is why so many people leave their money in exchanges like Coinbase or MtGox.