It's not going to get broken into. This is most likely what they're using. https://docs.cloud.coinbase.com/waas/docs/mpc
Discussion
Is it possible for bitcoin wallets to be too big to steal?
If the worst-case scenario came true in which Carmen San Diego figured out the key and moved all of the wallet, where would she go to spend the Sats? It would be hard to buy things expensive enough with the money. And the larger items that would be bought (houses, planes) are more easily traced.
Maybe it's an irrational actor YOLOing. Or maybe someone proving a point, and just never spending it.
It reminds me of the Rai stones from Saifedean's book. Everyone knows who this belongs to. It's possible to steal the stone and cart it home, but now that we have all seen the address, we all know who really owns it.
In my mind, the best option for Carmen San Diego would be to return the Sats in return for indemnity and earn a prize for helping identify security flaws.