The original Firefox sync did this "right" (from a privacy and encryption perspective) but required user out-of-band transfer of key material to add a new device. Apparently this was too difficult for users, so they dropped it in favour of "user accounts" with passwords instead.