It's also a big attack surface. Just like how a lot of malware looks for the browser password cache now, it doesn't take much for a malware developer to just go for the recall store. The malware doesn't need to pack in software to take screenshots, if the OS serves it up for them on a platter.