>Why would you run untrusted programs? Because I don't have time to read the source code of every version of every open source library/tool, or make sure the d

>Why would you run untrusted programs? Because I don't have time to read the source code of every version of every open source library/tool, or make sure the deployment process of all software I use is secure, or keep track of who controls these projects. >And if you do, why are passwords so much more sensitive than your entire browsing history, all your emails Because none of that allows anyone to take over my important accounts, steal my money or take my backups hostage. It's also much more difficult and inefficient to upload or parse gigabytes of documents and emails or keep a keylogger running undetected than it is to upload one small password file to the attacker's server. >not-passphrase-protected SSH keys? I don't have any of those.