Nice, that wasn't the case when I was still okay with Google.

In that case, I find it odd that the author doesn't recommend setting a sync passphrase, as that's not enabled by default.