I've been wondering how to prevent attacks like this. I'm a Mac app developer, so I can store secrets in the Keychain. The keychain is pretty secure, and it's

I've been wondering how to prevent attacks like this. I'm a Mac app developer, so I can store secrets in the Keychain. The keychain is pretty secure, and it's hard for an attacker to extract information from the keychain. But there are a number of ways that could be used to trick my app into revealing passwords if the attacker could change configuration files. Of course, when the attacker has full access to the local computer, then there are other ways the attacker could extract the data. But what if the attacker only had a way to write a file to an arbitrary path? Then they could use that to reveal passwords. The only way I can think of to avoid security holes like this is to use configuration files that are signed with a key derived from the password, but that may cause different issues.