Imagine if the blog post was malicious and the password reset endpoint was actually a honeypot to collect your master password? No thank you, I'll trust the en

Imagine if the blog post was malicious and the password reset endpoint was actually a honeypot to collect your master password? No thank you, I'll trust the encryption to do its job. Don't see how changing the master password is going to help any.