Hot wallet, especially wallet that communicate and broadcast, will have to be have zero-security bugs to be really secure. A bug that could have let a hacker control code execution will simply read the memory when the private key is used to sign message. And almost all security related apps/features need security update constantly - All operating systems do, especially those C programmed code that have the powerful tool of memory manipulation.