What are people thinking?
That this a regulated market? Scam companies shouldn't be able to list or IPO without being appropriately audited and compliant...
You technically don't trust them to secure your passwords. Each user encrypts there own set of passwords with an AES-256 master password. It's right in the summary.
Yes you do, they write the software and the whole stack that manages your password. The fact that encryption is used at one point in the stack doesn't change the fact you are trusting that all the other components from the app, to the storage are done properly and secure.
The explanation requiring the fewest assumptions is the most likely to be correct. -- William of Occam