2FA is key right now. I'm waiting for the day when things like Trezors are used for 2FA throughout any platform (there is a short-list of applications that currently allow for Trezor integration).
Especially in terms of crypto exchanges - why big exchanges like Polo, Coinbase and Bittrex haven't added hardware integration is beyond me.