Is HOT Wallet safe?

async loadChainsFromServer() {  // Load current cached config, prefer bundled default if newer  let cached = await this.storage.get("chains", BUNDLED_CHAINS);  if (BUNDLED_CHAINS.version > cached.version) cached = BUNDLED_CHAINS;  // Fetch with 3-second timeout  let finished = false;  const controller = new AbortController();  setTimeout(() => !finished && controller.abort(), 3000);  const response = await fetch("https://app.hot-labs.org/chains.json", { signal: controller.signal });  finished = true;  const newConfig = await response.json();  if (cached.version >= newConfig.version) throw "No changes";  // Verify ed25519 signature over the JSON body (signature field excluded)  const hash = crypto.createHash("sha256")    .update(Buffer.from(JSON.stringify({ ...newConfig, signature: undefined }), "utf8"))    .digest();  const PUBLIC_KEY = "ed25519:9h3AiXGHzNjatxqYQ1QPsJDUkexbd3LypgadaZKvhg4";  if (!NearKeyPair.fromString(PUBLIC_KEY).verify(hash, Buffer.from(newConfig.signature, "hex"))) {    throw "Not verified";  }  // Replace all chain configuration with the new remote config  await this.storage.set("chains", newConfig);}