Okay, here is update on the situation.
As I said, last time I used web vault to deauthorize all sessions, bitwarden didn’t lock me out of my android client. Today, I tried to deauthorize myself out of the bitwarden again, using the web vault. Again, my browser extension got deauthorized, however, the android app session did not.
That was distressing.
I continued on the android app, under settings, to manually sync the app. However, app responded “sync failed”. And I checked the last sync time, it was 22.08.2019! So, even though I could reach my vault on the android app, it was a pretty outdated version of it.
Then, I manually logged out of the android app, and logged back in.
So, the key take away is this: deauthorize all sessions did not work on the android app. After pressing “Deauthorize all sessions” on the web vault, my android app session still stayed, however it has failed to sync.
@jseb I haven’t emailed Kyle yet. Maybe he can chime in here @kspearrin
I hope this bug does not repeat itself in the future.