Looking at Coinbase and Gemini as a user I would probably prefer Gemini marginally because their bullshit about using HSM. They both seem to be hosted in AWS which from my POV is a major fuckup. Gemini and Coinbase are basically running a CTF where if you can find a hypervisor exploit and get lucky you can drain their hot wallet.