I'm not telling my setup is bullet proof. I'm just saying I gave in on some threats. I do not try to protect against all threats via all possible ways. I try to make my sensitive data to be unattractive and harder to get.

Latest part that you edited out was a question I would raise but it seems like you also think that would not hold.

Even though this setup is not secure. It's more secure than many everyday usage patterns. In a way at least..