The crux of the argument boils down to > If you have malware running on your PC for only minutes, you have a big problem in your life now rather than just changing some passwords.
Ok. How often does malware run for just a few minutes? Honestly if there’s malware running on any of my machines, it’s not clear the outcome is any different here. Sure there’s a hypothetical scenario where it’s worse. But it’s also just as likely to grab a copy of my password manager while it has everything unencrypted. And it’s also way more likely to persist for days or months, making access to historical data moot as it’ll just install its own key logger.