Beyond storage, Coinbase limits exploitation potential through rate-limiting withdrawals and using 'kill switches' to take signing keys offline entirely in response to incidents. Their security posture explicitly accounts for insider threats and social engineering by requiring multiple approvals for sensitive actions and assuming employees are persistent phishing targets.