Yea lack of info about who holds your btc is concerning. Consider all you have there to be lost one day.
Yup def get a hardware wallet :)
reply