Do you care about that kind of side channel for an offline vault?
If your adversaries are on your box while you operate your vault, then you have already lost because they will also have keyloggers, strace, etc.
If your adversaries are on your box while you operate your vault, then you have already lost because they will also have keyloggers, strace, etc.
If keeppass removes the possible timing attack, the attacker could just add it back in and use their own client, if they have a copy of your database.