Even if he has a backup, if the server the node with 1k in the hot wallet's being hosted on is compromised, then theres practically no chance of them just sending the coins somewhere else(The attacker would send it to their wallet).
I'm out. This "discussion" is going nowhere. What's the point of trying to discuss issues with people who have no clue.