Yes, that's correct. The script takes the output from bw-cli and pipes it directly (sort of since we also store it in a variable to calculate the number of rows) to gpg which then encrypts it.
The only secret we have in plain text here is the API token for Todoist which I'm OK with. It's always the balance between security and comfort.
This is a really nice service and I have used it for quite some time. Just a small reminder; to relieve the wttr servers, please cache the results on disk if you for example want to have a higher refresh rate on your tmux status bar.
See my dotfiles repo [1] if you're interested in such implementation
That's one of my favourite advantages of free software. No worries about licensing, any computer I pull out of a dumpster gets a full suite of powerful software I'm familiar with.
https://github.com/Granddave/aegis-rs