At least, they can if you haven’t enabled Chrome’s built-in protections. On Windows PCs, you can use Windows Hello to lockdown access to your Chrome passwords.