I definitely don't know what I'm doing and don't claim to. Wasn't a serious recommendation and hopefully not a serious question either.

I don't think you'd need to defend yourself against a state level actor here. 10M gone missing from a crypto exchange isn't exactly a national security event. In the crypto world I think that's just called Tuesday.