I do this as well. It still works fine for me. Have you checked your keyboard text replacement settings? I remember them getting cleared out once after an update. If they’re still there, would try deleting and re-creating them.

Your friend should assume that any login entered on that machine is compromised. They should also assume that machine itself is still compromised.