Hacker News Reader

I really don’t understand why they didn’t just encrypt the whole records.

The convenience of offering to re-login if your session is expired and you hit a site where you use it?

That could have been cached locally on your machine, separate from your vault.