So I guess the story here is: if you use postman for anything sensitive don't use an account as well, as the sync feature can no longer be disabled.
It's also worth pointing out that AFAICT Insomnia's equivalent feature may be more secure though I haven't dug into it: it sounds like all that data is encrypted by the client and not recoverable by the Insomnia team if you lose your password.
It sounds like they have moved some stuff around recently too, because you can no longer disable sync: https://support.getpostman.com/hc/en-us/articles/203492852-H...
So I guess the story here is: if you use postman for anything sensitive don't use an account as well, as the sync feature can no longer be disabled.
It's also worth pointing out that AFAICT Insomnia's equivalent feature may be more secure though I haven't dug into it: it sounds like all that data is encrypted by the client and not recoverable by the Insomnia team if you lose your password.