One feature that is not noted in the article is the configurable access to the items in the keychain. You can allow certain binaries to access certain items in

One feature that is not noted in the article is the configurable access to the items in the keychain. You can allow certain binaries to access certain items in the keychain with or without a password. So for example, for your banking credentials to be autofilled in Safari, you can require the master keychain password to be entered. This is extensible beyond the browser, though, another example being SSH key passwords accessible by ssh.