Is creating a long password for my coinbase account enough to keep my bitcoins secure? I've made an account with coinbase and purchased some bitcoin. Only after to start reading people talk about getting hacked and how bitcoins are not secure unless you put them in a "wallet".To be frank this wallet stuff confuses me a bit, I rather just keep it simple and keep the coins directly in the place they go when I buy them, which I guess would be on the "exchange"? So I'm wondering If I create an incredibly long password for my coinbase account, Is this enough security to protect my bitcoins? Just "walletless" and in the hands of coinbase.  I realize if coinbase was hacked as a whole , there would be issues since they act as the bank basically. but aside from that is there really any risk leaving my bitcoin on their if I have like lets say a 45 character long password?
The long password will not help that much and is also likely difficult to enter. Much better enable 2 Factor Authentication with Coinbase (https://support.coinbase.com/customer/en/portal/articles/1658338-how-do-i-set-up-2-factor-authentication-) which gives you a second level of control. 

If you have the wallet e.g. on the phone you have much more control on your funds and do not depend on the security implementations of Coinbase. Also does Coinbase have limits when moving funds which does not apply to your funds in your local wallet.

Often splitting funds in local and online wallets gives most flexibility and security so your eggs are not all in one basket.