I don't think that is paranoia. Being your own bank for significant sums demands you consider events like 0-days or firmware issues. Sounds smart to me.