If someone gets your private key (the one that accesses your whole account), then isn’t that total access? Ratcheting doesn’t really matter at that point right?