When importing the passwords into a new devices you’re required to enter the device password of whatever device created the password initially.

Still no proof that there’s no back door, but as far as the system on the surface goes, it does make sense.