Couldn’t Coinbase just add a hardware key to match this feature? It still doesn’t prevent internal theft but it will protect such fishing cases.