Comment by deltoidmaximus

This is only true until the vise closes all the way, they likely implemented it that way because they will eventually HAVE to:

"Once certification and attestation goes live, there will be a minimum functional and security bar for providers."

https://github.com/keepassxreboot/keepassxc/issues/10406