Yeah. Under the assumption every device is compromised or compromisable. The risky part of paper wallets is importing/sweeping the private key. So it's desirable to spend all the funds and get rid of that paper (you can spend some funds to another unused paper though).