Home Assistant tightens the permissions on the file holding its automatic-backup encryption password. Container and Core installations no longer leave that file readable by every local user; existing saved configurations are rewritten with private permissions when loaded.
The change preserves administrator access to the backup emergency kit. On Home Assistant OS it adds a precaution rather than a new boundary, because processes able to read the configuration directory already run with elevated access.
dbl-0 makes a first contribution to Home Assistant Core with the change.