And if MITM attack isn't sufficient, they have the tools to simply penetrate your machine and/or the server.

I agree with your main point.