Furthermore, everyone who has any real money in digital currencies KNOWS THEIR COMPUTER IS COMPROMISED. Anyone who thinks differently is a fool. So, we have things like multiple signatures, two party authentication and cold storage.
Of course, and long term keys you keep offline. But passwords and online authentication codes are exposed every single day when you login, the only defense against such threat is a clean PC.