You don't need physical access to the computer at all. All you need is to make your malware program steal focus the same way Slack does it and then you can have

You don't need physical access to the computer at all. All you need is to make your malware program steal focus the same way Slack does it and then you can have the users password for that computer. It's good practice to always assume bugs aren't innocuous even if you can't think of a way to exploit it.