If that happens, nothing will save you. The malware can just grab your session tokens whenever you log in, then do whatever it pleases.