From just having seen the top of the article this may have been more secure if you had to solve a rubiks cube ti get in.
I wont pretend to even know the level of complexity involved in securing something like that but so often it looks like some companies/developers think that adding any secure crypto algorithm into the product that magically means the app itself is highly secure and so pay no attention to all the other functions not handed by AES. XORing with a woefully small key and then only bothering to encrypt a tiny portion of the file only anyway boggles my mind.
As usual the crypto is sound but the implementation is shoddy.
