I mean, it's game over in pretty much any situation that your endpoints are compromised. It's incorrect to take these measures as giving perfect security. They

I mean, it's game over in pretty much any situation that your endpoints are compromised. It's incorrect to take these measures as giving perfect security. They're efforts to greatly increase the cost for attackers. It's a pretty good improvement to increase effort from "having a password" to "having remote access to your computer."