Storing sensitive data in plaintext within the GUI makes the data more easily accessible than if encrypted. This significantly lowers the difficulty of exploitation by attackers.An attacker can often obtain data from a GUI, even if hidden, by using an API to directly access GUI objects such as windows and menus.