I don’t understand. With the old extension, also anybody could have clicked on the “Vault” tab and viewed all items. (though there was no “All items view” like now - but every folder with all items in them, and all “unassociated items” (= not in any folder) were also within reach – or “filtering” by types and listing them all, was also easily possible)
PS: … not talking about how it can happen, that anybody can access your unlocked vault. 