That is correct, if it's tampered key loggers, screen recorders, cookie stealing, memory leaking, etc. will be possible