Basically any attacker that is able to control the certificate store on your device could also just install a keylogger.