Technically that was an OS exploit and not a jaxx exploit, but yes the did not encrypt their phrase file. I stopped using jaxx when they were having Dash issues. It was a blessing because it made me pull the trigger on buying my ledger. It "just works"