[g_p]

IP theft might also be a distraction for an attempt (perhaps unsuccessful, perhaps undetected as of yet) to gain a foothold in the development environment for introduction of future changes to the client code.

For something like a password manager using client side crypto, compromising the software supply chain of the client is an interesting proposition for an attacker.