External party confirmation resilience

If a node hosting an external party with confirmation threshold 1 is compromised, can the attacker transact as that party without its keys? Is threshold ≥ 2 across independent nodes the only mitigation?