At the point where the feds are paying Israelis millions to break your boot shit, they’re paying dudes to watch you type in your password or any number of other things. I’d argue as long as you’re not among the [number of prey] the predators are looking to take down at the back, for whatever category of shit you’re in, you’re fine
You gotta love how aggressively they prevent users from seamlessly running executables from the internet, a VERY legitimate common use case, but a desktop shortcut from the internet? Run away!