On a more general basis, questions regarding theoretical threats are usually closed as off-topic here because one could imagine an infinite number of theoretical threats with as much questions whose answers will be of no practical use for anybody (trust me some people may be very creative when they convinced themselves they are being spied upon).
That's why you will not find a study on this site about the best shape for tinfoil hats ;).
On this site we try to focus on current, documented knowledge. This does not prevent things which first appear to be sci-fi to become actual facts, but they become so after a proper demonstration or irrefutable proof that the technique is practically usable (even a lot of things which are true in lab conditions become unusable in real life scenarios).
Meanwhile, most theoretical issues can be boiled down to some already known (and often already addressed) issues. For instance, in the current case as suggested by other members your question falls into ensuring that some user cannot determine just by himself the right password to connect a service, with OTP being the most standard way to address this.