Actually, master password changes require the decrypting and then re-encrypting of the entire database, done locally. Mobile javascript engines would die.

because web forms are hard

-- the mid-90's Perl CGI scripts are calling and they're laughing at us all.