I've had the suspicion that an attack like this has already been used in the past on a few Twitch/YouTube streamers. They possess a large corpus of training da

I've had the suspicion that an attack like this has already been used in the past on a few Twitch/YouTube streamers. They possess a large corpus of training data (heck, some of them play typeracer on-screen.), and would no doubt have a few with quite audible mechanical keyboards near decent recording setups. Then again, good security hygiene still mitigates this. (Avoiding password re-use, using 2FA where available etc.) You wouldn't be emitting the sounds of typing your password while using a password manager either... (Well, except for the unlock password. Also there's something to be said about clipboard implementation across different operating systems.)