Thanks for the feedback. We wanted to keep it simple for the general audience and we dig in just a little bit more in FAQ. We're in the process of creating a dedicated "security" page. As this is probably the smartest community we can find on the subject, would love any specific input on security.
TBH, we leveraged some of the same technology and thus wording that SigFig, Personal Capital, Mint and other pioneers in the space use.
You need a lot more cryptographic detail if you want this product to be treated as secure.