That's a very unrealistic view of how that works. If you plug a USB into your computer and your computer is compromised, the next time you log into bank account your cookies are snagged and they do something with your money.
If it’s that easy to do, why do I get spam emails and texts with broken English? Seriously the earlier comment was accurate, if you feel the need to comment on the security of this obviously not nefarious project change fields, you don’t have the stomach for infosec.
