One could argue that cookies need to be more securely stored than passwords, because they can allow an attacker to bypass passwords and all other authentication

One could argue that cookies need to be more securely stored than passwords, because they can allow an attacker to bypass passwords and all other authentication factors.