I remember hearing talk about making it that at the blockchain level hive nodes will reject transactions that use of keys far above the permissions required. like using owner to sign active key transactions, I'm not sure if it's already in effect though.
One reason HiveSigner asks for the master password is it is a quick way to import all keys since all keys are derived from said password but still I wouldnt even do that. I'd rather take the time to import each one.
Now here's a question.. How does one clear your keys from your local storage if you previously used hivesigner?
Since I hardly use it I'd prefur to not have my keys sitting there potentially insecure.
I'm a Hive Witness supporting the blockchain, please consider voting for me. - find out more here!