Might as well steal your sessions if they had that kind of access. MFA bypass is a lot more valuable than petty blackmail.