Just takes a brute force or 0 day vulnerability to get master password access, them they have everything.

Something that seems secure never is online, like the 2017 Intel managetment vulnerability where remote attackers could access your computer by sending a null password, and access your keyboard and camera etc