Could my funds be stolen via API?

All top cryptocurrency exchanges have already fixed this issue. So, they offer extended API access. The main thing you should do is disable the withdrawal option.