How a fake job interview led to the \$6.3B Binance hack

The Register reports that the record Binance hack started with a fake job interview, with attackers reportedly getting malware onto an employee's machine. North Korea has denied involvement, but the playbook matches earlier attacks attributed to groups like Lazarus. Users have reportedly withdrawn about \$3.6bn since. Does this change how you think about keeping funds on exchanges vs. self-custody, or is self-custody just a different set of risks?