It seems like these services are moving to a model where they get their user's trust by storing the majority of funds offline, which means they cannot be hacked remotely.