Comment by rcxdude

Yeah, I think the situation is that if your password is already weak/known to a level that it should already be considered compromised, a malicious HIPB could surface that compromise a lot more reliably/quickly.