Yes, also it is strange that people use hot wallets on servers - using BIP32 addresses it is easy to run a hot wallet at home on a mobile internet line for example. Good luck in finding that IP even. Also you could just run TOR at home too to hide your hot wallet IP even further.

Anyways - it's sad to see that people prototype stuff quickly, gain traction and then suddenly realize not by their own but by getting hacked that they screwed up. Then, because others put their trust in them, they just can walk away unharmed and disappear. People who warn about that do either so in a way that is usually insultive or at least perceived as a "typical naysayer" that just weakens the entrepreneurial spirit... This is still the internet and you have to expect that there are hundreds or thousands of people out there that are smarter and better than you in any and every aspect - tread carefully!