Like I said to somebody else features that make life easier for the legit users make life easier for the bad guys. For my personal use I thought it was pretty handy that I got everything across because I was kind of dreading having to get all my passwords in again (first you’ve got to remember them all, or look them up, then there’s all that logging in). But the implications of that feature, especially on a machine you don’t have sole access to in a c$ world are pretty far reaching. It’s a good reason to use that master password and make it tough, but even then everything is breakable so it’s a good thing for people to think through.
I never want to be the boy who cried wolf, but I also believe forewarned is forearmed.
Agreed. Security is tougher than most people think. Fortunately, I don't have to keep anything important on ms-windows boxes.