Hard to take them seriously

I don't think I'm being biased when I say that relying on Windows for security is probably unwise, but whatever they use, if they really want to keep data secure, then they shouldn't put it online in the first place, passwords or not. Keep it in the building. Real security is physical security and until they realize that, then this "sooper sekrit" stuff is just a childish game.