i thought about removing the file editor addon but the fact is that someone breaking in with knowledge of home assistant will be able to install that addon and still be able to view my passwords.
I agree with that…then your home assistant is not configured secured enough…but if he succeeds now then he has a one way ticket to your secret file without making the hacker difficult. not sure if that should be protected more… especially if home assistant is exposed to the internet.