I think instead I will choose to both A) not install a rootkit on my desktop B) avoid an OS that handles passwords in plaintext

This is why gamers should reject kernel anti cheats. A single dev at a single company that requires one could read them as easily as any other file. I’m not exaggerating, unless I’m misinformed