[Nextgrid]

Any malware capable of exfiltrating a file from your home folder is also capable of calling the export command and tricking you into providing biometrics.

[asteroidburger]

Not necessarily; "read file" is very different from "execute command." The biometrics part is a substantial lift as well.