Agreed. That sort of data should not just be a few clicks away and with only a reliance on honesty and will power to stop abuse. You need to have this sensiti

Agreed. That sort of data should not just be a few clicks away and with only a reliance on honesty and will power to stop abuse. You need to have this sensitive data locked down appropriately so that people cannot just unilaterally access it on a whim. There should be an audit trail back to some rationale for access (e.g. support case) that enables access, and if the data is sensitive enough it should use multi-party auth. Keyloggers are not going to stop someone who is using someone else's computer already - they are WHY they are using someone else's computer!