First thanks for adding.
The script is not encrypted by default, and it can also be encrypted with grin address. All operations are the same as grin-wallet. About privacy, since it is associated with an email address, I think there will be some privacy risks.