3 ms·

Maybe follow up and tell them to set FLAG_SECURE. It may help to mention that LastPass already does this.