Why a Passphrase Changes Everything: Real Talk on Crypto Security and Open Source