Spot the Bug: sends first, asks later

A withdraw sends the caller their funds with msg.sender.call{value: amt}(""), then runs balance[msg.sender] -= amt. The math is right and it works for a normal wallet. What is still wrong?