Why Does Coinbase Give The Same Limits For Sends & Withdrawals?

Title kind of says it all, if someone hacks your account and sends coins to a rando address you are likely F'ed

If someone hacks your account and sells coins before withdrawing money to your already connected bank account then you at least still have the value in your bank, annoying, but you aren't F'ed

There should be separate limit options for sending and withdrawing, and they might as well allow us to whitelist receiving addresses and bank accounts to allow higher limits to only those addresses or bank accounts

(Obviously any newly created bank account would not get the same limits as a grandfathered in account without additional verification)