There are so many ways of gaining access to your funds, from copy paste virus, to key loggers, social engineering forcing you to reveal your password and your private keys, phishing links, to malware inserted in the software of the wallets, all of that is something we need to take into account when we try to secure our coins.