tbh someone who would hold 1M in a hot wallet is someone who would compromise their keys through malware or phishing. almost 100% chance user error

In 99,99% the user clicked oa malicious link and granted some shady smart contract access to the wallet.

By the way a hardware wallet doesn’t prevent this either.

Exodus has no control over the wallets, it is a non-custodial wallet. If you want to share your wallet address or any transaction hash, it is possible to analyze where and exactly how your funds were drained.