the goal of the HSM is to slow down finding the keys, but with a successful attack you could send tx to the HSM for signing which would not compromise they but still compromise the funds, so the HSM is not going to help us much in that case, unless we have some way of ensuring only valid parties can send anything to the HSM