There is no security history[0]; you gave the client shell access and they used shell access; that's all there is to it. 0: that is specific to scp rather than

There is no security history[0]; you gave the client shell access and they used shell access; that's all there is to it. 0: that is specific to scp rather than ssh in general, and where the client (rather than some third party) is the attacker