This is still important information to have. Most power users have sudo privileges. Now it is really obvious that when you get rooted while using sudo, all of

This is still important information to have. Most power users have sudo privileges. Now it is really obvious that when you get rooted while using sudo, all of the unlocked keychain items can be read from memory (before you are alerted that you are rooted). Keychain still mitigates this attac, though, because until you unlock your items they are secure. If you use the same password for all of your keychains, the malware might have already captured the password, but if you different passwords for different keychains you still have a chance at being secure.