If the vault is open, a script could read and save all passwords. Export is a user convenience feature.

This is a vulnerability that requires the plaintext, hence a bit of a joke!

Or am I missing something? (I didn’t read past the initial paragraphs).