The difference is that I need to access your file system only once to get your account key. I need permanent access to exploit your automation.
Attackers can also scale revenues, potentially, by selling account keys to third parties.
Attackers can also scale revenues, potentially, by selling account keys to third parties.
Your second sentence is pure FUD imo.