This is crazy. While sorting my new wallets out, I thought I would test to see what would happen if I sent a small amount to an address from my old Coldcard. Within 5 seconds of broadcasting the transactions it was picked off and the fee was then bumped up with RBF several times over the following few seconds until the fee reached the total amount being transferred. So, in the end, the hacker got nothing and it all goes to pay the miner who gets the next block.