Yes, encrypted file includes unencrypted public key (even if it doesn't need it to decrypt) and it means that anyone who has access to the encrypted file, can produce another encrypted file with the same key. I wanted it to be very simple to use, but probably I'll reconsider that.