A rootkit could obtain enough information to cost you money. Paypal accounts, banking accounts, etc. A rougue riot employee (or a vendor company, or someone exploiting it) with malicious intent could harness that capability with negative consequences.