It's interesting that they boast "256-bit AES" on the Github README, but when I look at the source code, they're not doing authenticated encryption:

https://github.com/maebert/jrnl/issues/549