I would suspect some vulnerability to all keys created thus far. We need a method to create key in offline hardware and use it like a coldcard does for signing BTC. Until then keys are vulnerable.