[kevincox]

It should probably be regarded as "relatively secure" encryption. You can't have truly secure encryption if your passphrase is garbage.