If someone is trying sudo from you account then it's already compromised and all your user data is accessible so best encrypt the sensitive stuff (not just the fs).
Gaining root access would allow someone to modify system files eg libgpg.so to eg forward your unencrypted data out. But that can be achieved without root access too, eg via modified PATH, LD_PRELOAD, etc. So many ways in my mind melts.
Why don't we all run our browsers as restricted users? A) laziness B) our browsers (and google) already know most passwords.
Requiring a sudo password merely protects system files. Like you won't be able to do rm -rf / as easily. Ok. If that's a risk it's your own problem. PLEASE STEP AWAY FROM THE COMPUTER.
If you are worried about someone taking control of your computer use file integrity monitoring. I do this on my server and also have a little report script that I read every morning in bed. It does geoip lookups for location and companies even. Interesting to see where hacks originate. Usually it's apple, google and kindergartens in china. Note: resolv.conf is modified. wtf. Need to read up as to why.
Yesterday was a mild day I got 1.3m of hack traffic. I used to get 500+m daily. My only accessible ports are ssh and smtp.
Fundamentally I am in favor of a small number of tight security practices, not a slew of half assed ones.
Interested in your comments. Happy to learn about new and fabulous hacks.
Actually, 
@levi is right. rm -rf / is more likely - and a funny prank. But wiping ~ is probably funny enough. If you consider this a risk I suggest offline backups.
/^2022 Feb 22/ /var/log/msgs
[2022 Feb 22 00:00:01 - 2022 Feb 22 23:59:01]
[_ignore] 45
9 x sshd.*:info  Invalid user .* from                               
9 x sshd.*:info  Received disconnect from .* disconnecting normally 
9 x sshd.*:info  input_userauth_request: invalid user               
9 x sshd.*:notice  pam_unix\(sshd:auth\): authentication failure    
9 x sshd.*:warning  pam_unix\(sshd:auth\): check pass; user unknown 
[ssh:reject] 9
5 x - 45.155.204.161 invalid user admin password 
4 x - 45.135.232.200 invalid user admin password 
[smtp:sent] 2
2 x root@xxx.ch -> xxx@gmail.com 
[smtp:reject] 17
4 x -  31.210.22.177   spameri@tiscali.it -> spameri@tiscali.it 
3 x RU 212.192.246.221 spameri@tiscali.it -> spameri@tiscali.it 
2 x NL 37.0.15.241     spameri@tiscali.it -> spameri@tiscali.it 
    -  2.56.57.31      spameri@tiscali.it -> spameri@tiscali.it 
    -  31.210.20.7     spameri@tiscali.it -> spameri@tiscali.it 
    -  31.210.22.180   spameri@tiscali.it -> spameri@tiscali.it 
    -  85.202.168.37   spameri@tiscali.it -> spameri@tiscali.it 
    -  85.202.169.127  spameri@tiscali.it -> spameri@tiscali.it 
    -  85.202.169.147  spameri@tiscali.it -> spameri@tiscali.it 
    RU 212.193.29.49   spameri@tiscali.it -> spameri@tiscali.it 
    ZA 41.13.24.77     spameri@tiscali.it -> spameri@tiscali.it 
[smtp:shenanegans] 293
112 x VN 103.207.37.125  44 Hanoi        -                        
98  x FR 193.56.29.119   -  -            -                        
26  x FR 193.56.29.154   -  -            -                        
12  x -  31.210.22.177   -  -            -                        
6   x NL 37.0.15.241     -  -            -                        
6   x RU 212.192.246.221 -  -            -                        
4   x SE 178.73.215.171  -  -            Portlane AB              
3   x -  31.210.22.180   -  -            -                        
3   x -  85.202.169.127  -  -            -                        
3   x CN 117.50.173.133  05 Changchun    -                        
3   x RU 212.193.29.49   -  -            -                        
3   x US 167.94.145.59   AZ Scottsdale   SCOTTSDALE HEALTHCARE    
3   x US 216.218.206.66  CA Fremont      Hurricane Electric, Inc. 
3   x ZA 41.13.24.77     06 Johannesburg VODACOM-ZA               
2   x -  2.56.57.31      -  -            -                        
2   x -  31.210.20.7     -  -            -                        
2   x -  85.202.168.37   -  -            -                        
2   x -  85.202.169.147  -  -            -                        
 1298    ( 1298)    CRON.*:info
  321    (  321)    postfix/anvil.*:info
  299    (    0)    postfix/smtpd.*:info
   36    (    0)    sshd.*:info
   12    (   12)    kernel:notice
   11    (    0)    postfix/smtpd.*:warning
   10    (   10)    systemd.*:info
    9    (    0)    sshd.*:notice
    9    (    0)    sshd.*:warning
    4    (    4)    postfix/qmgr.*:info
    4    (    2)    postfix/smtp.*:info
    2    (    2)    postfix/cleanup.*:info
    2    (    2)    postfix/pickup.*:info
    1    (    1)    tripwire.*:notice
[df]
Filesystem      Size  Used Avail Use% Mounted on
/dev/sda1        19G  8.8G  8.8G  50% /
[muckolla]
* /etc/resolv.conf
[rxtx]
  day >>1.3m <<253k | >>1.3m <<253k
 week >>1.3m <
42k | >>9.2m <<2.3m
month >>1.3m <<401k | >> 41m << 11m
[last]
wtmp begins Fri May 21 17:20:34 2021
[lastb]
admin    ssh:notty    45.155.204.161[??]   Tue Feb 22 19:05 - 19:05  (00:00)
admin    ssh:notty    45.155.204.161[??]   Tue Feb 22 19:05 - 19:05  (00:00)
admin    ssh:notty    45.155.204.161[??]   Tue Feb 22 19:05 - 19:05  (00:00)
admin    ssh:notty    45.155.204.161[??]   Tue Feb 22 19:05 - 19:05  (00:00)
admin    ssh:notty    45.155.204.161[??]   Tue Feb 22 19:05 - 19:05  (00:00)
admin    ssh:notty    45.155.204.161[??]   Tue Feb 22 19:05 - 19:05  (00:00)
admin    ssh:notty    45.155.204.161[??]   Tue Feb 22 19:05 - 19:05  (00:00)
admin    ssh:notty    45.155.204.161[??]   Tue Feb 22 19:05 - 19:05  (00:00)
admin    ssh:notty    45.155.204.161[??]   Tue Feb 22 02:54 - 02:54  (00:00)
admin    ssh:notty    45.155.204.161[??]   Tue Feb 22 02:54 - 02:54  (00:00)
admin    ssh:notty    45.155.204.161[??]   Tue Feb 22 02:54 - 02:54  (00:00)
admin    ssh:notty    45.155.204.161[??]   Tue Feb 22 02:54 - 02:54  (00:00)
admin    ssh:notty    45.155.204.161[??]   Tue Feb 22 02:54 - 02:54  (00:00)
admin    ssh:notty    45.155.204.161[??]   Tue Feb 22 02:54 - 02:54  (00:00)
admin    ssh:notty    45.155.204.161[??]   Tue Feb 22 02:54 - 02:54  (00:00)
admin    ssh:notty    45.155.204.161[??]   Tue Feb 22 02:54 - 02:54  (00:00)
admin    ssh:notty    45.155.204.161[??]   Tue Feb 22 02:54 - 02:54  (00:00)
admin    ssh:notty    45.155.204.161[??]   Tue Feb 22 02:54 - 02:54  (00:00)
btmp begins Thu May 27 20:42:10 2021
[vmstat]
procs -----------memory---------- ---swap-- -----io---- -system-- ------cpu-----
 r  b   swpd   free   buff  cache   si   so    bi    bo   in   cs us sy id wa st
 0  0   9036 1286088  17828 622968    0    0    13     1    0    2  0  0 100  0  0
[nmap]
Starting Nmap 6.40 ( http://nmap.org ) at 2022-02-23 00:01 CET
Nmap scan report for localhost (127.0.0.1)
Host is up (0.000011s latency).
Not shown: 65529 closed ports
PORT      STATE SERVICE
25/tcp    open  smtp
143/tcp   open  imap
9091/tcp  open  transmission
44022/tcp open  sshd
44080/tcp open  httpd
51413/tcp open  unknown
Nmap done: 1 IP address (1 host up) scanned in 6.93 seconds
elapsed: 20.239s