By that same logic, passwords wouldn't be security information either because anyone could videotape someone typing theirs in at a coffee shop from afar. But, I

By that same logic, passwords wouldn't be security information either because anyone could videotape someone typing theirs in at a coffee shop from afar. But, I suspect that's rare because it's really difficult in practice. The purpose of many security policies is to increase the amount of effort an attacker must go through.