How is this different than just trusting the browser to handle saved passwords in an encrypted manner?