They're not the only options, passphrase encrypted local password storage is an option. That's no false sense of security.