OP comes off as someone who doesn't like the well-tested standards in the space

uh, yeah, correct.

and isn't even willing to discuss why the design has, and omits, certain features.

I’m definitely willing to discuss this.

I can't trust software from someone who won't be transparent and honest about intention and design in a very important security space

luckily you don’t have to trust me. read the code, it’s 120 lines of shell.

people at megacorps have AWS master keys sitting around in unencrypted files at rest. If you store any passwords or credit cards saved, they’re also unencrypted at rest. Most people use sticky notes.

I’m an individual. My risk profile is low. I can rotate the key once in awhile and that’s good enough for me.