>NOTE: the vendor's position is that the password database is not intended to be secure against an attacker who has that level of access to the local PC.
Such a trash response from a provider of software thats supposed to protect sensitive data.
If 'someone' (an attacker), introduced themselves physically in your house or workplace (thus obtaining a high level of access) to place hidden cameras and to record you typing your master passwords. And if that someone later retrieved the footage and a copy of your password manager database... Would you blame your password manager for being insecure?
Such a trash response from a provider of software thats supposed to protect sensitive data.