It could very well be an exit scam - I wouldn't want to cover it as an insurer, either. "Hey, I screwed up and sent this money to the wrong party!" without any

It could very well be an exit scam - I wouldn't want to cover it as an insurer, either. "Hey, I screwed up and sent this money to the wrong party!" without any way to show that you are not in fact still in control of the money through some means. Hacking into your own system puts a much higher barrier on orchestrating such a scam.