theli0nheart has addressed that we're not dealing in absolutes. To complement, I can be pretty sure that if someone unscrupulous had hacked my private key away, they would have been very incentivised to empty the account immediately, before I or another thief did it. If it was just me, sure, they could take a risk and wait for bigger deposits. But tragedy of the commons also happens to criminals.