I agree with your malware point. If your system is compromised, and attackers are past the 'airtight hatchway', then you're doomed anyway.