Coinbase is one of the most reputed exchanges out there and it's strange to hear something like that about them, but you're right not your keys not your coins, and anyone who keep their coins at exchanges are allowing others to own their keys, and if keys are not their then the coins are also not their.