[faeyanpiraat]

But then malware on the user’s machine could catch that password.

There is no 100% solution to this.

[8organicbits]

Different problems need different solutions. I don't think I've ever seen a solution that solves 100% of all problems. This doesn't stop me from trying to improve security where I see opportunity.

[lemarchr]

Malware on the user's machine could catch the password in either case.