But she is right, unlike your password manager the browser has to store it unencrypted because nobody bothers with setting the master password.