I have unleased them multiple times. Everytime was almost instant.
Either way, leasing is not going to secure your coins.
The point is, they "instantly" cancel lease but you cannot send them for 10 hours. So it gives you a 10 hour cushion to find out you are hacked. Unless they did an update, this was always the case.