The easiest way to break encryption at rest on anybody's CyberPowerPC(tm) is to capture the machine in its powered-on (and unencrypted) state.

I would guess the browser extension had no automatic logout configured.