This is the main reason to avoid browser based password managers, just plugin a usb with portable firefox and 'import' the passwords into firefox If the user is logged into the PC, everything is available to extract