Is that really something we want to advertise as a selling point for twine?  The text sounds like it’s saying that people should not trust Python standard library code to not do bad things with the passphrase.