Based on this Binance hack and previous incidents, in institutional systems, the security of permissions, processes, and operations is often a greater vulnerability than the private key itself. Even if the private key is well protected (MPC, HSM, etc.), if the system/permissions that control the signing service are compromised, the effect is almost the same as stealing the private key.