Requires an authenticator app for MFA.
Encrypted with a key derived from your password. Not the server - only you.
The database holds only scrambled ciphertext. Nothing meaningful to hand over.
Encryption keys live in volatile memory and vanish when your session ends.