> So the malware needs to trick you into performing the TouchID gesture.

That's not meaningfully more difficult than tricking you into revealing your key file password.

>Instead of on each sign operation.

But from your video each sign operation also requires a touchid prompt?