I think the panacea is dedicated hardware that can produce secure tokens (a signed message) without having to expose my key to the machine I plug into. But existing systems still require that level of trust; I&#x27;m doing no worse than someone with a password typing it into a possibly insecure machine.