That's not how it works. When you stake your Ethereum, it gets locked up and can't be withdrawn.
When your staking time is up, then you can withdraw it. Smart contracts could be used so that multisignature wallets could be used which would prevent a hacker from taking funds provided to the mining pool.
I think a few friends and I are going to start a validator pool when time comes to switch over.