I'm not an expert in internet security or crypto. Some of the comments below raise some interesting points both defending the intent (and implementation) of it

I'm not an expert in internet security or crypto. Some of the comments below raise some interesting points both defending the intent (and implementation) of it and pointing out the flaws. However, as an unsophisticated person interested in my data security, this sounds absolutely awful. Hopefully more clarity on this emerges.