Yeah, if it's a single sig it's one point of failure. Multisig with borderwallet or paper analogue back ups is my advocacy. But, in this particular case smaller tramsaction size and open scource vetting or compliling the code yourself is really your only option. Brutal cautionary tale.