## Description - Seeds written to `~/.ddk/*/seed.ddk` in plaintext - Located in `ddk-node/src/seed.rs:11-23` ## Fix - Encrypt with user passphrase - Use AES-256-GCM or similar - Add key derivation (Argon2/PBKDF2)