OK. I think I understand now. I still don't think it's fair to call it defective design (and I'm not really certain that you ever did call JD's password priva

OK. I think I understand now. I still don't think it's fair to call it defective design (and I'm not really certain that you ever did call JD's password privacy defective, BTW). More like a design that is unsafe in the hands of the typical driver, perhaps. Why do I care? I just want to understand the risks for someone like me, who has taken care to choose very strong passwords. My conclusions from all of this: (1) The data integrity issue is serious because it presents an opportunity for introduction of malicious code, creates a risk of data loss, and may lead to security breaches. (2) The local binary is opaque, and therefore presents a theoretical risk of compromising even the most "close to the vest" key management strategy. (3) The password protection issue is a serious shortcoming that can, and should, be mitigated by choosing strong passwords. Yes?!