One difference is the speed apparently. You'd need the malware to be installed for a while. With recall you need to exfiltrate a couple kb of data that's already there on disk.
That said, yeah, if the user interacts dumping saved passwords is trivial as well.