If the data can be accessed by the user, it can be accessed programmatically -- no? It's available locally for something malicious to exfiltrate.
That's a little bit worse but not much worse.
But to be honest nobody in the malware world cares about your screen unless you're a president or CEO. They will just steal your passwords, and either encrypt your disk or use you as a residential proxy.