Major Weakness uncovered in Norton 360 Identity Safe

Just discovered there is no way to lock the Identity Safe (IS), if a hacker plants a Trojan on your PC they can look in your IS and see all your passwords.!!!

The only way to protect it is to log out of it, but that defeats the object of having it in the first place, you want to only login to it once so it offers up all the passwords for sites you need them for. The only security options in Norton are to a) lock the Administrative Settings and b) get it to ask for an admin password to release the login details for a site you want to access, but nowhere, does it prevent anyone from simply looking at your stored passwords inside the IS. I confirmed this with a Norton tech today who was just as surprised. Is this an incredible flaw from one of the biggest security companies in the world or is there a way of locking the IS that the Norton tech and I can't find ?