[nicce]

I am not sure if that justifies this.

If hackers pwn your desktop computer and you do not notice it, they get all the data you have access by yourself. Nothing new here.

[smarx007]

If MS claims the data is not accessible [by malware] remotely and can only be accessed if the attacker has physical access, a POC just just fopens the file and prints it is a fair exploit POC. No matter how trivial that looks to you.