They keys are actually double encrypted. They require the password and pin. If you have more security questions, I'd say audit the code with one of your favorite AI models. See where the issues lie. the code is open on Github