Sorry but that is nonsense. "The file format is the basis for security, not the client application" is so wrong, any messing with the application is game over.
Hell if you leave your computer unlocked, a rubber-ducky could replace your executable and middleman your master password.
Hell if you leave your computer unlocked, a rubber-ducky could replace your executable and middleman your master password.