“The worst part is I did nothing wrong”.

Except using some of the absolute weakest available security hygiene possible for cold storage.

Single sig
No passphrase
Entropy generated by a “trusted 3rd party”