Spending from cold storage over Lightning is only as safe as the key split. The on chain seed staying cold matters less if the channel keys are hot, since that is where most self custody losses happen. If the hardware signer actually signs channel state, solid. If it is just watch only plus a hot ke...