pull down to refresh

if the password manager is hacked though, isn't that like hitting the motherload at once?