It depends on how you use it. As long as the identifiers are not visible to anyone else (like you described), its okay. But if you sync your secrets across dev

It depends on how you use it. As long as the identifiers are not visible to anyone else (like you described), its okay. But if you sync your secrets across devices, using services that are not under your control, or your device gets stolen, more information than necessary got leaked.