The write-up indicates that both of the exploits to get to the Master Password would have required physical access to the device, and one required a root exploit.