3 ms·

All is lost the moment you have malware on your device. It can just steal the session key after authentication.