Can someone who is an LND expert confirm I understand this correctly?

I'm running a full bitcoin node and LND, as different UNIX users.

The LND service has the keys for my bitcoin wallet.

If my bitcoin node got compromised, the attacker woud NOT be able to immediately be able to drain any funds (because the bitcoin service account doesn't have access to move funds on chain, nor does it have the ability to read the macaroons needed to interact with the LND service).

If the LND service get compromised, all funds are at risk.

And obviously if the server gres rooted, the LND service is compromised.

Did I get that all correct?