There's always that possibility. My NIP05 has been updated, so the hacker must have got into my web hosting account, too, or else I am whom I say I am.