Similar to how the app has a pin option. It would be nice to protect chome extension without requiring master password. Especially in an office setting where there are people around, looking up large passwords or typing pins is dangerous. Perhaps timing out and then requiring 2FA from an site Authenticator is the happy medium.