Anyone with physical access to a shared computer can do anything they like on the machine including, but not limited to, installing keylogger, installing malware, reading all the user data on the machine.

There is nothing Chrome can do to prevent these types of attacks - see the FAQ entry for more - https://www.chromium.org/Home/chromium-security/security-faq#TOC-Why-aren-t-physically-local-attacks-in-Chrome-s-threat-model-

The recommendation is to separate physical people by separate, password protected user accounts, and also lock your screen when you are away from your computer.

Aside, your proposed solution to require admin access to show a password would not work for those people who do not have admin access on their workstation e.g. in a corporate environment.

This is about Chrome and not about installing a malware. A person in your
position, how can you easily
squash a critical security flaw of one of your leading products ?

Best

Athul

This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot