Any "controller" wallet software that requires it could get compromised. Like the recent btcpay plugin that caused someone to lose several BTC.