yes, somebody can steal your btc. but to protect it, you need to save your password and private key in an offline device.