This is still less problematic than an attacker getting in and draining the funds.