

In practice, most people’s chrome will have the key available in one form or another all the time anyways because most people don’t need to unlock their stored passwords every time they use one.
Not saying this isn’t dumb by MS, but it doesn’t open up a new attack vector.








If they weren’t, the headline probably wouldn’t have used the comparative