BTCPay Server hot wallets automatically store seed phrases on internet-connected merchant servers to automatically sign and approve payments without separate device confirmation

From the articleBTCPay tells users to turn off their servers after reports of drained wallets