Any malware capable of exfiltrating a file from your home folder is also capable of calling the export command and tricking you into providing biometrics.