[WD-42]

pass clients can totally be backdoored. They decrypt the secret to plain text and add it to your clipboard or whatever... could easily shuttle it off somewhere else at that point.

[jasonm23]

You build it from source if you have concerns, so no, it can't "totally be backdoored".