`export_session_state()` serializes and stores all cookies into the config entry (`CONF_SESSION_STATE`). These cookies can include session credentials and will be written to Home Assistant storage alongside the username/password. Consider minimizing what gets persisted (only cookies strictly needed to refresh/reuse the session, or store a reduced/hashed form), and avoid persisting cookies unnecessarily to reduce exposure risk.

[lukefx]

export_session_state() serializes and stores all cookies into the config entry (CONF_SESSION_STATE). These cookies can include session credentials and will be written to Home Assistant storage alongside the username/password. Consider minimizing what gets persisted (only cookies strictly needed to refresh/reuse the session, or store a reduced/hashed form), and avoid persisting cookies unnecessarily to reduce exposure risk.

Originally posted by @Copilot in #17 (comment)