It defeats the purpose in the scenario that your vault is stolen and decrypted. But it still protects you in the much more likely scenario that a data breach exposes your password somewhere else.

Decently surprised at how well it performs for a PWA.

Brings me back to that PSP Hacking 101 video of them modding their console to take full sized memory sticks. It’s ridiculous how much Sony sold those things for.