Pretty sure the general stance is:

If you gave someone permission to take money out of the chest through the FC and that person used that power to remove funds, it's basically your problem. Square views that as fine and dandy because you gave their character the original permission. This is why it's strongly encouraged to ONLY give those perms to the owner of the entire FC and make sure they're educated on how these scams work.