not sure if this will help for feature dealings. But, I use Multipool, Cryptsy, and Cex.io. On MP and Cex I use the two step verification with my phone. so on MP I have it so I can click a button and it just uploads all my wallets into the site. With that you have a pin you need every time in order to change any information. could try that. At least it gives you some more layers of security but, with anything else it's not 100% safe but I would say it is at least 95% safe.
I don't believe that he was hacked from the pool but his wallet. The best is to make a cold storage.
