Your database is stored on their servers, but never in plain text, so without your master password it’s relatively useless. You could probably bypass the 2FA if you pulled it down locally as a hacker, but it’s still encrypted at a relatively high level. You aren’t brute forcing my master password anytime this decade,…