Yes, in the hackmd, we have that listed as a CON for this setup. However, we can possibly consider a separate key just for instant power down. That way, you only use that key very rarely and should remain offline. Another way is to attach the account recovery feature as a 2fa, IE your buddy account has to approve the instant power down before you do it. Things like this to better protect the user. Also, 2fa like you get with exchanges, but not sure how to add that with this feature.