Recently I had a long time mitigating possible risks occured due to malware I got on my Mac. Now I wiped the system and trying to figure out how to set up it in such way that when similar situation happens I won't worry about sensitive information being stolen.
So, my primarily concern right now is access to SSH keys. Currently I have my keys generated with passphrases, so if somebody gets access to my filesystem he won't be able to do anything with the key files. But, as I see, a very common solution is to store passphrases for those keys in Keychain.
I have added passphrases for my SSH keys to Keychain and now it seems that I don't need to enter login password nor passphrase when keys are being used.
Am I correct that while passphrases are stored in Keychain, anybody who was access to my shell is able to use them without being asked for passphrase, and, if so, why is such insecure solution is so widely recommended to be used?