The AES wrapping is exactly what prompted me to ask for an explanation :) That confused me too. I'm also wondering about using a vendored OpenPGP JS instead of WebCrypto, not sure if there's a reason but I'm wary since it increases the attack surface.
EDIT: Also confused about the multi-key encryption and ZKP mentions.
EDIT: Also confused about the multi-key encryption and ZKP mentions.