It's quite simple enough for an intruder to install a keylogger to obtain your wallet.dat password. Further, the intruder could easily modify your send-address

It's quite simple enough for an intruder to install a keylogger to obtain your wallet.dat password. Further, the intruder could easily modify your send-addresses and have you send Bitcoins to him unknowingly. Some sort of secured 2-factor authentication definitely needs to be implemented moving forward.