I will disagree on the RAM scanning being easier. It is my opinion that the weakest link here is the password store.

The security hole here is a password management system that can work without external secret. It is shocking that this is still common practice and that people use them.