They could have always injected code to migrate your passwords to a new system when you unlock your account, no matter how secure the settings are. Wealthsimpl

They could have always injected code to migrate your passwords to a new system when you unlock your account, no matter how secure the settings are. Wealthsimple actually did something like that when they purchased SimpleTax. Logging into your account after the acquisition resulted in them in decrypting and migrating data (I think it was opt-out by default, it's been a few years). Any system running inside your password manager's process can in theory be used to extract your data. Ideally the surface area stays small.