On the Olas settings screen the user’s private key is not hidden. It should be invisible to the user except when copied.