I think.it's security issue I manged to "steal" my family google acount and their freinds with their permision
you can't beleive how many I got in few seconds.
so I reported as security issue....
But this is not an attacker this is anyone you don't need to compile dll
When you got one computer with several passwords to google accounts you can than sync them to your chrome browser and so on
you can steal millions of google accounts and sync it to one malicious account.
people probably doing it right now :(
The thing is that even if you are logged out like most of the people every thing is saved in the default profile so when you logging in to chrome you just take all the passwords , think about college computers farm or public computers ....