I saw pocket Bitcoin have an option to give them your xpub and they send to new address each time, opinions on this? I know xpub is watch only but online people were saying your private key could leak (even with HW wallet) and then all ur funds would be compromised