> So is it the case that a secret is sealed with a userId if and only if it is stored on user document, and every secret stored on a user document is sealed with a userId?

Correct.