So the question then becomes, which one is a bigger risk, forgotten passwords or malware.
And the second question then becomes, who is the right person, the user or the developer, to answer the first question.
From malware you can secure yourself
From forgotten passord you can secure yourself too.
But you cant secure your private keys when you will not set password and someone will copy it from your computer. Example - a good friend with pendrive
