Lots of the bitcoin hacks have been security amateur stuff. E.g. MtGox was just storing MD5 hashed passwords. Unix added salts to passwords decades ago. The people making this sites don't know about security.