An L1 EOA's private key is the only thing that can move its ETH. But on L2, the rules are defined by the rollup's state transition function, and the party that controls upgrades to that function (here, the Security Council) can in principle overwrite anything. Yeah...your assets on layer 2 is controlled by a council, not your private key.