While looking for information if anything has changed recently on the master password front I found a somewhat dated but still valid statement from Google. And I think it's fundamentally flawed.