" it needs to go via pushing a backdoored keybase client (or, ahem, a secret entity needs to force that to happen)." Or just one or more packets directed at th

" it needs to go via pushing a backdoored keybase client (or, ahem, a secret entity needs to force that to happen)." Or just one or more packets directed at the client if it has some kind of listener open with a vulnerability. If nothing else, most security-focused apps don't do covert channel analyses. If this one doesn't, its secrets might be intercepted through storage or timing channels via another compromised app (even unprivileged) on the computer. Mitigating that usually has a performance hit and/or takes a language whose operations map pretty well to hardware where developers can estimate timing well. So, they've removed one step. That's good. Opponents don't have to go straight to subversion from there, though. There's a few more possibilities.