Not their passwords, tho. I am not trying to be difficult here, just trying to understand the reasoning behind leaving the passwords stored in plain text.

We found no way to store password somehow else as Keychains are platform specific, but we plan to add Keychain support in the future.

If you used ‘platform specific’ built-in secrets sync you’d be done... but then how would you justify charging for the built in sync? So I see your conundrum.

> …SSH keys in ~/.ssh are also plain text.

What? Mine aren't, nor have they ever been…

If you are storing ssh private keys on disk without a password you are doing something wrong.

If someone can read the files in .ssh, chances are they can also add an alias to the ssh command that steals your passphrase. As for the "stolen laptop" scenario, whole disk encryption is preferable.