Re: But
Well seeing as the software is locally installed, if you get malware installed on your device then your security is already compromised. Even without hitting keychain, surely it could just key log passwords anyway?
Granted this gives you a smaller time window and you grab all the passwords in one hit.