Leading up to the hack the "cold wallet" was online almost daily.
What makes you think that it was online almost dayly?
Sorry daily was a bit of an exaggeration, but there is a number of outputs from the wallet in January.
In January there were 7 days when they sent funds from the wallet: 9th, 10th, 19th, 22nd, 24th, 26th, 27th. IMO it's more or less as often as we could expect.