My local vault IS accessible only on my wireguard vpn. 'come at me bro'. I'm one man to hack that is an undertaking, better results (as many vaults as they can find) and probably easier (bigger footprint) hacking the password manager cloud company...