To clarify, re-authentication prevents malware from doing what you said it would do. Regular people wouldn't need to use it.