Good Point.

I guess that's why it's considered a hot wallet, right?
You could mitigate this concern by using return addresses designated to a cold wallet.