Actually, master password changes require the decrypting and then re-encrypting of the entire database, done locally. Mobile javascript engines would die.