If they can compromise a discord account through social engineering, they will also be able to compromise "web3" account keys through social engineering. Unless multisig is done properly and people don't fall for stupid greed scams ("airdrop").