True! So you have to choose a good master password and use an expensive hash.

On the other hand, if you take any other approach, you place either confidence in the security of a service (1password), or you store passwords somewhere. In both cases, you have a problem when you can not retrieve the passwords anymore.

If 1password is hacked or simply offline, or your phone gets stolen, you basically lost access to all services.