[diminoten]

No doubt, I just think the fact that the user is going to interfere with any direct exfiltration ruins this as a stand-alone attack.

Your idea, however, is exactly the "missing piece" to this attack.