I agree with the developers. If malicious code is running under your user account, it could steal your master password no matter how KeePass is coded, e.g., by

I agree with the developers. If malicious code is running under your user account, it could steal your master password no matter how KeePass is coded, e.g., by waiting for you to start KeePass and then killing it and showing a fake one that you unwittingly type your password into instead.