With no encryption system, malicious actor Eve may well manage to publicly broadcast a similar request, "send out five TRX from Alice's account to Eve's account", while no you can validate if the transaction is requested by Alice herself.Bob sends again the generated PrivkeyPart to Alice. The partial private vital isn't going to allow for everyone