Web3wallets are non-custodial in nature (that is the whole point of web3wallet), isn't it true? IMO this hack has something to do with phishing or other attacks towards some individuals (although 106 is not a small number). I mean, while 'not your keys, not your coins' is true, you have to safeguard your keys from others as well in your individual capacity. No matter how robust the web3wallet provider is (Binance, Bybit, Coindcx, etc.), ultimately, you are the one who must be careful.
this is another lesson why we should not use the custodial wallet for crypto storage.