It looks like it uses a randomly generated unique 128bit salt from crypto.getRandomValues, can you explain what it is doing wrong to be rainbow attack resistant?

https://github.com/mprimi/portable-secret/blob/main/creator/...