Isn't Chrome Sync opt-out at this point? I seem to recall some small controversy about that a while ago, and setting a passphrase seems like something that it's unlikely most people will do.

A default open browser history synced across devices seems like exactly the sort of thing that would show that DDG has increased its market share.