I believe (after a good amount of research) that Coinbase (and Gemini, but need to check their faq) are insured ONLY if they are hacked. If a personal account is hacked, insurance does not cover that. From the source - https://support.coinbase.com/customer/portal/articles/1662379-how-is-coinbase-insured-
You are viewing a single comment's thread from:
"All digital currency that Coinbase holds online is fully insured. This means that if Coinbase were to suffer a breach of its online storage, the insurance policy would pay out to cover any customer funds lost as a result."
and
"This insurance policy does not cover any losses resulting from the compromise of your individual Coinbase account. It is your responsibility to use a strong password and maintain control of all login credentials you use to access Coinbase and GDAX."