Yeah I don’t know
If the user was using Windows, fast startup could have been enabled so they were able to extract the password from the RAM maybe? Other than that I don’t know
firefox with betterfox user.js is my recommendation
Yeah I don’t know