The problem with PBKDF2 however is that if you pick a weak password it's useless. It would be better if they included an option for a key as well like other password safes do.
When is this not the case?
I would love to see research about the use of keys and passphrases. Especially, do people who have a key then chose a weaker master password?