Well the passwords are GPG encrypted, so they'd need your private key too, not just breach the server. What sites you have accounts on is visible though.