Generally server-side wallets don't keep all user funds online. Most are stored offline in cold storage, which requires multiple signatures to access.