Suppose a hacker got my BW credentials

With 1, 3 and 4 isn’t that awfully cumbersome to traverse everytime you want to access something in your vault, or am I missing something?