Isn't multisig or even just having a passphrase mitigating this?