Interesting. They probably should enforce entropy minimums on the password, and maybe supply e.g. output of `shuf -n 4 /usr/share/dict/words` on demand.
They don't say how long they will retain the encrypted file. Probably long enough, except when they don't. Maybe they keep it until they fold.