I'm confused since the article never highlights any of the facts about the strength of the master password used to protect the vault. Of course a weak master password can easily be broken with an offline GPU accelerated attack.