Staked ETH 2.0 Stolen?

Question:

Can staked ETH 2.0 be hacked and stolen? What exactly is a staking pool anyway, a form of a hot wallet? Cold?

If a hacker is in fact able to steal ETH, are they able to send coins immediately, or does the unbonding period still need to take place?

Thanks.