When you went looking for it, did you try Googling for [1password file format]?

No, didn't know that looking just at the file format is sufficient. BTW: I'm no security specialist so excuse me any stupidity here ;)

But couldn't the implementation of parts of the service being flawed? (and you cannot know as it is closed source)