[beefnugs]

Sorry but that is nonsense. "The file format is the basis for security, not the client application" is so wrong, any messing with the application is game over.

Hell if you leave your computer unlocked, a rubber-ducky could replace your executable and middleman your master password.

[phoerious]

There is actually very little we can do about local attackers, with or without AI. All we can do is mitigate.