Paul has moved his wallet to a more secure device, but his wallet data is still in his hot wallet. This means that Paul did not get rid of the hot wallet vulnerabilities by moving to a new device. If Paul has any doubts about the hot wallet, then he'd better create a new address using a new device and transfer coins there.