[kurthr]

I'd agree, requiring in-room access makes it not that big a deal. There are other attacks (like measuring the radiated emissions) to detect finger coupling remotely that I'd be more concerned about. Those could detect private user input and could be hidden nearby.