Comment by Wowfunhappy

How are they decrypting your password manager database? Sure they'll get your tax returns, but while I'm not saying that's great, didn't they get most of it from Equifax anyway?

My personal "thread model" is basically to make sure I can survive an automated attack. I'm convinced I can with my current Mavericks setup. If an experienced attacker was targeting me specifically, I'm sure Mavericks would make their life easier, but I also think they'd probably succeed no matter what OS I was running. https://xkcd.com/538/

But I do have my Bitwarden vault set to use 2,000,000 KDF iterations, literally the highest it will go...