Can someone explain to me how this extension -- in its current form -- is not a ***MASSIVE SECURITY HOLE***? (relative to 1Password's master password security)
If someone gains access to my computer, all that person would have to do is:
1) install google chrome extension
2) go to my bank website
3) voila, access. (*without* having to enter my 1Password master password)
I immediately uninstalled the extension once I realized the threat that the extension exposed. But that doesn't prevent someone else from reinstalling the extension. No?