There's two didn't attack models, "steals permanently" and "runs code on and returns to you" (which includes both "steals from your hotel room and puts back" or

There's two didn't attack models, "steals permanently" and "runs code on and returns to you" (which includes both "steals from your hotel room and puts back" or "installs malware on"). Yes, for the first one it's hard to get to the bank account and I agree the comic is inaccurate. For the second, it's very easy to install a keylogger or a cookie-logger or a malicious browser extension or whatever. Riot installing a kernel module is more like the latter.