It’s true that protecting against processes running under the users account is hard, but exploiting that would require code execution Accessing a secret in a f

It’s true that protecting against processes running under the users account is hard, but exploiting that would require code execution Accessing a secret in a file does not necessarily. It could be stored on a network share, included in a backup or archive or an attacker could confuse a program into handing them the file. Especially that used to be a very common attack against browsers.