Nice to see this kind of report, even if the conclusion is rather damning.
And it seems to suggest that using it with (something like) Dropbox is a bad idea too:
> EncFS is not safe if the adversary has the opportunity to see two or more snapshots of the ciphertext at different times.