Honestly, for some software this is the answer. The other one with hackers is that it’s usually easier to trick an employee into giving you the master password than finding an obscure exploit in their codebase, though it does still happen.