[charcircuit]

If the attacker screenshots the note they can login to your account without HAVING that note. Yes, a house key is something you know.