[akerl_]

I'm a bit concerned how little they talk about security of this data. At one point they suggest using "codes" to obscure messages:

"For example, you can design your message to contain privately shared codes (“my password is a combination of the street where we grew up and the first name of your mother-in-law”)"

This would only really add security against a very small threat, if they were properly encrypting data at rest: attackers taking over one of the email addresses on the recipient list. And I'll not even dive into how bad it is to base passwords on this kind of personal info.

Is anyone aware of more details on what they're doing to secure this data?