I think it is a major security flaw that Thunderbirds default master password do not ask for password before it shows any windows. For example, you can read stored emails without entering the master password.
The only way to prevent this is by using your add-on but only by checking "Master Password+ options -> Startup -> Ask for password on startup". Why is this not default?