Yeah but it would have to be a targeted attack. In any case everyone should be using something like 1Password anyway.