Well not anymore...

I don't get your response, though. It was an app where the keys were "yours". The "not your keys" is about custodial services, which this is not.

Well, then how can your coins be stolen without the keys?

If the keys were stolen using a cryptographic trick, how was it done at scale?

It sounds to me like at some moment the keys were exfiltrated.

So "not your keys, not your coins" stands. If you don't have strict control over the keys you don't have strict control over the coins.

Sounds like you're more advocating for cold storage. You could be right, but even the most secure software wallet is only as secure as the computer it is running on.