yes they can. if you have no solution to protect your wallet and computer, you will lose your coins. i always use strong password, authy and metamask to protect my wallet
True, we need authentication too for a strong security and a long password. Scammers is everywhere, if they want to steal they can do. They have many ways to steal, so better to double protect it.