A very interesting article, and it highlights an attack vector that I wasn't aware of. So, thanks for publishing!

One thing the article lacks - it talks about (and even recommends) being able to pick a different passphrase, but offers no guidance for how someone might go about doing that.

I looked, but couldn't see anything. Not in Chrome, not in passwords.google.com, not in Android.