can confirm that it is now fixed!
friendly guy on the support, responded very fast and I believe him, that it was not on purpose!
seems all fine now, everything (except the price & btc address - guess necessary for the payment process) gets pretty good encrypted with AES-256 and there is no possibility anymore for the admin to get the keys. so i can recommend it know!