You still have to trust your passwords being stored elsewhere, with weak encryption, if at all.