I agree that phishing is the easiest way to access your funds if you don't pay attention to them. It's enough to follow simple rules to avoid this. But if hackers need it, they have other ways to get to your wallet.
Personally I dislike to keep altcoin asset for longer time because I'm usually try to sold as far as it reach the profit target or cut loss if experience downtrending.
In other advantage, we can control our asset much easier but IMO the safest place is local exchange just like I did and over 4 years never occur any problem !