What key does it use to encrypt the stored passwords? If it uses the phone's unlock code, what key does it use for phones that don't have one set up?
If someone had access to the hard drive contents (e.g. by connecting it to a Linux machine), how easy would it be for them to decrypt the saved passwords?