The UTXO is not a thing. It's just a message that was signed in the past. Conventional concepts of ownership don't apply to Bitcoin because in actually there is no Bitcoin. Somebody generating a key on their own is not the same as hacking into your device and copying it. The fact that the key was easy to guess is not the fault of the person who guessed it.