There are ways to prevent this. Like using multi-sig with geographical separation (so you can't move funds alone) or setting up forced time-delays. Ultimately, being your own bank is a massive responsibility, and I think too many people take that reality too lightly.