I read this post also. And 2h ago i was thinking maybe this was just there to tell people emotionally to better dont let all coins on exchanges.
When this guy told he got 30char password and 2FA then there was only difficult way to hack i think. Because when you want to pay out you have to enter 6Pin 2FA. I got a phone only for 2FA and its always offline.