Yeah definitely a bit worrying, I am actually not sure how I created my other account because I see it also only had the master password but not key now that I doublechecked via steempeak since you mentioned it :) It did see they mention master password so maybe because we use it so little the difference just never registered.

I only checked it via my steemit wallet because I figured since I created the account via steemit maybe my master password is specific to that since the chain itself still only cares about the main 4 for auth.