Was not aware. I don't use FF for browsing. If they have same issue its just as bad. If someone wants to hack your computer they can, I get it. But not adding at least some level of security (profile level pw required to reveal clear text) does not seem right.

Also understand Chrome needs to be able to get at the clear text at some point, and that you can get at it with JS. Adding a session/timeout based master/login password (like ssh keychain for example) to autofill pw, would be one idea to plug some of the holes.