That is odd, you're right.

Gossip encrypts your nsec, so that you can login with a password, but it tells you it's doing it and shows you how and where it is stored.