So the main problem is that the only way to make something secure is to introduce authentication factors, e.g. passphrase or biometrics