Relay uses the browser bookmark permission to read and apply changes locally.
The security boundary
The password derives the local encryption key. Relay does not receive it and cannot reset it.
The backend moves encrypted payloads, checks ownership, and enforces plan limits.
Pro restore snapshots are full encrypted vault snapshots, not readable bookmark copies.