This I understand very well.
So presumably they sent the email only after I sent them the first "blob of gibberish" telling them I added _at least_ one entry to my password database.
Presumably they don't know if and when or how may entries I have. In this case they only noticed the first time I sent in my encrypted database.