Chris Green wrote:
Pickpockets *don't* generally root around in the pockets of everyone
in a crowd, it would be counter-productive because it would hugely
increase their chance of being caught.

Good point. But with computers, the "cyber pickpocket" *can*
do an automated rootle around in the cyber-pockets of everyone
with an insufficiently secure machine; and the chances are
minimal that anyone will notice; or even if they do notice,
no one will care; and even if they do care, there is no simple
way for the miscreant to be located or stopped.

Updated your threat model yet?

#Paul