I'm also wondering how you sign up with your email and password on the demo? That doesn't seem decentralized unless that info gets converted into a private key locally.
To be absolutely clear, this is just temporary. In the release version, email auth won't be required and your account will depend on a private key that only you have access to, similar to Bitcoin and most other offerings in this space.