&gt; If your Mac gets popped, attackers are going to own the kernel, and thus your keystrokes.<p>Right, but at that point the account is effectively already compromised.<p>Even if I have a second factor, they can just piggyback on the session I create when logging in via that second factor.