> If accessing device-local data is outside of the threat model, why are we encrypting these data at all? We might as well store them in plain text. Yes, exact

> If accessing device-local data is outside of the threat model, why are we encrypting these data at all? We might as well store them in plain text. Yes, exactly. I feel a lot of these tools are doing this. And it’s okay if it explicits that the data is plain text. However why annoying users with a PIN in the first place? I am sorry bitwarden didn’t fake this seriously. Let me know if you are looking for a job. We have several positions open. Feel free to shoot me an email julien -at—serpapi.com