From a cursory scan, this looks like it doesn't support key wrapping -- the private key ("identity" in age's parlance) is stored unencrypted on disk.

This is arguably a non-issue for most use cases (disk access is "game over" under most threat models), but it's nice to have e.g. for sharing configurations between multiple machines over a public channel (like a dotfiles repository). It would also bring this roughly up to "spec" with what other password managers do (i.e., in terms of requiring a "master" password that unlocks the vault).