Points of Failure: Why HSMs Fall Short for Securing Digital Assets