Many people (excluding me) save their passwords somewhere on their devices, therefore a virus will be able to obtain them easily and you could loose your account, even if you are advanced enough to remove a virus afterwards. An optional two factor authentication for osu! would be very handy in these types of situations. What do you think about it?