While it would be easy to focus on the threats from remote attackers, like those using infostealer malware steal your smartphone account passwords, or stolen session cookies that can bypass 2FA ...