They also have this weird full disk encryption that doesn't validate that the boot partition is compromised, allowing exploits like this: https://forums.spacerex.co/t/bounty-first-person-to-share-ho...

This breaks both the 'store key locally' and the KMIP setup.

And for their file-based encryption you cannot change the password. You need to create a new folder with a new password and copy all files over.