I exported my data and checked the passwords. Every ampersand (the "&" sign) in a password gets exported as "&".
For instance, if my password was "&12345" it gets exported as "&12345".
Since "&12345" is still imported as "&12345" this clearly sucks for obvious reasons 🙂