I just want to concur that primary password does not seem to be an adequate solution to this security problem. Firefox should only ask for the primary password when 1) auto-filling on a site and/or 2) editing, revealing or copying the password (on a ...
