That's not what VRchat's blog post say at all, though.
"Every month, thousands of users have their accounts stolen, often due to running a modified client that is silently logging their keystrokes as well as other information. These users – often without even realizing it! – run the risk of losing their account, or having their computers become part of a larger botnet."
People running a backdoor client and getting their passwords stolen? That doesn't sound... wrong?