[gruez]

How are you going to "mount a scalable attack" against a local-only password manager?

[lxgr]

Malware targeting unlocked local password managers would be one option.

[gruez]

In that case aren't you already hosed because the same malware can steal all your login sessions?

[dvngnt_]

no because I'm not logged into all of my accounts at once but if they can open the PW database they can