..... are you vulnerable to someone brute forcing the password encryption on the watching only wallet.dat file (if that is a thing).  Or is that not sufficient to steal funds?