Given the use case here, where someone wants to send a single file to someone else, with no pre-existing way to communicate securely, why would it matter? The o

Given the use case here, where someone wants to send a single file to someone else, with no pre-existing way to communicate securely, why would it matter? The only practical attacks would be on the passphrase itself (which they have no way of protecting). The fact that openssl accepts any passphrase is likely a bigger problem in practice than the lack of authentication.