There's also the issue of... if the "hacker" can send that transaction, can't they also cancel your transactions?>

Sure of course, but the hacker can't steal anything by cancellation of the transaction. It would be an annoyance for you but you would retain your money, which should be a huge difference for you.
In sum the feature would prevent (or make it much harder) the stealing.