If the server the masternode was hosted on was compromised and the 1k in the hot wallet, then there'd be no moving the node.
Yes there would. You'd just send the coins somewhere else, then start again.
Or are you talking about a masternode owner has no backup of his wallet or private keys?

It's like a hacker getting someone's bitcoin wallet and saying that the original owner of the bitcoin wallet has a chance of getting his coins back.
Even if he has a backup, if the server with the node with 1k in the hot wallet's being hosted on is compromised, then theres practically no chance of them just sending the coins somewhere else(The attacker would send it to their wallet).
I dont know the % of users that have their coins in cold or hot wallets, so this is all speculation on both sides though.
So now you're assuming that the hacker has brute-forced the wallet encryption key on the rare masternode he was lucky to find with a hot wallet?
interesting assumptions there dude.