: Hardware wallets keep private keys offline, making them immune to the screen-scraping techniques used by Cerberus [4].
Once a private key is public, that address is a toxic waste zone. Never send future funds to it.
With those permissions, Cerberus can do the following to capture your private keys: