Solo staking

After setting up your own node and following security best practices: What could possibly happen to your stake in case your node gets owned? Is there any way to change the address rewards are being sent to? Could an attacker modify the node to the effect that you‘re getting slashed until your stake is gone? Once withdrawals will be enabled, could an attacker withdraw to their own address?