I'm configuring my mac and encrypting my disks with FileVault 2. As the boot disk is encrypted at startup I have to login via the EFI partition before the OS will boot.
From my understanding, most people who have investigated FV2 think it's a pretty decent FDE solution. However it appears to be vulnerable to keyloggers.
As my login is linked to the encryption keys, access to my login credentials will give access to my disks. As mac doesn't (easily/readily) support two-factor login, then an attack against my password will suffice, correct? Should I fall victim to malware with a keylogger, the entire security of my mac is compromised.
The question then, is this a valid attack vector and anything to be concerned about? Are keyloggers a real threat? I've read that there are no reported cases of keylogger malware for mac, but I'm unsure how old or valid those reports are now.
If it's valid - is there any recommended safeguards?