Strictly hypothetically speaking, if someone found one of the¹ private keys that match your address, they can spend your funds.

¹P2PKH, P2SH-P2WPKH, and P2WPKH use a cryptographic hash function with a 160-bit result to form the address. Since there are just shy of 2^256 private keys, for each of these addresses there exist about 2^96 private keys that can spend the funds. Luckily 2^160 is still an humongous number and a collision is astronomically unlikely given the key generation was reasonably random.