If I understand this correctly this is a neat work-around that will allow hardware wallet users to keep an empty online wallet to stake on behalf of their hardware wallet balance. I don't see any downside to this - how would it make Pivx more attackable?