Passwords not sufficiently locked to networks, leaks them
I used to have a distro installed version of Polari, and and recently uninstalled that and installed the Flatpak, reconnecting to the various networks rather than migrating the settings. And Polari just tried to use my Freenode password on the Internal IRC because the account identifier are anything but unique.
Eg. the first account created will always be
account-id: idle/irc/hadess0, the second one
account-id: idle/irc/hadess1, etc.
In the distro installation, FreeNode was the 2nd network I connected to, and in the Flatpak'ed version, the Internal network was the 2nd network I connected to.