This is 100% true.
Time delays, Daily Limits, Allow Lists... these need to become the default not just for big players like Binance, but also for everyday users.
If we moved towards that direction, we could mitigate most of the OpSec related hacks that are happening.