> Literally they could just supply a password manager that also sends all the passwords to a third party. Could have taken the source, added the backup to 3rd

> Literally they could just supply a password manager that also sends all the passwords to a third party. Could have taken the source, added the backup to 3rd party server, and released binaries.