I can see malware secretly enabling Recall and hopping on it as a really good keylogger which they don’t need to code themselves.