Their key encryption is fairly safe, if you use one-password mode, they could intercept your password from the webinterface if they wanted, but the password exc

Their key encryption is fairly safe, if you use one-password mode, they could intercept your password from the webinterface if they wanted, but the password exchange is solid and doesn't reveal the password while still allowing to decrypt the key. Two password mode is technically more secure since even if the authentication exchange is cracked, the decryption key doesn't touch anything the server can see, it's locally decrypted. There isn't any meaningful diff you could make.