Except if the master db is stolen without the master password, one can throw guessed passwords at it and know when one worked (i.e. the db becomes readable).

Throwing passwords at a salt db gets you... what?

But then if the salt is stored and the algorithm is known, doesn't the salt just essentially become the password, from a security standpoint?