Seems so. Its not isolated in the secure element (which is not open source). It can be exfiltrated and the only thing you need to recover is a govermment ID. Which would mean if the government wants to freeze your assets, they can.