@atoponce @dalias all pass exposes are file names. Yes, indeed, if bazbar.gpg in your password store is revealing important info that you're a bazbar member, you're vulnerable to bazbar exploits.
But calling this a grave vulnerability is a bit farfetched