Most cold wallet addresses with a balance have never signed a transaction. This keeps the public key secret behind sha256 hashes which don't fall to quantum computing (128 bits of security with quantum search).