I guess there are still ways, like keyloggers and the like, or even a virus on a machine. That’s why I look Google’s two-factor authentication.