Steem has potential of making people money, getting a hold of an active key makes it so easy for them to clean an account out. All the steem and SBD's that are not powered up can be transferred out of the account right away, If a person does not notice their account is compromised it only takes 7 days for power downs to happen and they theif can get a lot more money. It is nice to have some SBD's and Steem just sitting in case of emergency, but those emergency funds can go bye bye real fast during an attack.