Yes, from a wallet-hacking standpoint that's my understanding. Less surface area for attack than USB.
Discussion
Yes meaning it’s just “confirmation” of a signature but no compromise of the key itself?
Yes I think in any signing operation that’s the idea, that there is no way to recover the private key from its signature, which is a hash of the private key and txt data, it’s a one way function. I am no expert though