This is a local flaw that requires malicious software running on the users's machine. The malware can read the unlock key by pretending to be a web browser extension.<p>This is a reminder that no security is 100% and that it is an endless battle...