Important Be sure to save your raw transaction data in a safe place, because anybody with access to it will be able to spend your coins.
Whoa whoa, why is this written in trezor's official wiki?The RAW transaction doesn't contain his private key, it can't be recovered from the signature or redeem script.
It's also impossible to change the output without changing the signature unless they sign it with SIGHASH flag like SIGHASH_NONE
The only issue there is his privacy if he decided to share it.
Maybe the article meant: "spend it without your consent"?
it is just terrible choice of words.
it seems to me that the process explained in that link is simply signing a transaction and not broadcasting it. then it tells the user to store the raw "signed" transaction somewhere safe. and if someone could access THAT signed transaction they can broadcast it and it would be technically "spending" your coins but not changing anything about the transaction.
also note that this is not the time locked transaction that was discussed here before with OP codes such as OP_CLTV but it is simply setting the transaction locktime to a certain height. and all that does is that it prevents the said transaction to be mined until the block height is reached.