Stealing your wallet.dat is easier. With a copy of your private keys they can spend your coins from anywhere, without having to get remote access to your PC and send them locally.