Comment 3 for bug 127116

Thanks for your report! As hggdh mentions, this is true of any system. Even if sudo and bashrc weren't used, aliases and other tricks could be built to hijack passwords. If you have some specific suggestions for areas of improvement, please open new bug reports for those fixes.