The fact that it already provides the check is bad enough, since everything is exploitable, even locally. Like when Edge translator was leaking passwords, it just took the advantage of "a feature". The majority of password managers offer that...
