Excellent post, @biasnarrative.
Since you asked, I would also make a mention for the Vessel wallet app, which has an additional encrypted (in app) key, required to claim rewards.
Lastly, I would add a closing paragraph, which is focused on emphasizing again why one shouldn't log in with password or active key. Anywhere.
Wow, yeah I don't know how I missed having a closing paragraph. Perhaps I need to edit it.