Question about losing staked eth on the POS chain.

If someone was to have staked etheruem on an exchange like Coinbase (which swaps eth for eth2 and is not withdrawable) and your account was compromised would your staked eth be vulnerable to be moved even if the user cannot move it themselves due to the staking restrictions. I'm asking out of curiosity given the crypto.com situation.

Disclaimer: This is only a hypothetical question, not a real situation.