I thought the actual concern was with hackers gaining direct access to servers, then just sshing and moving the funds to themselves, not some convoluted weird Lightning-specific attack. We didn't see any of these hacks (but we did see hundreds of exploits in application code that manage users' balances).