The big issue with client side decryption (which sounds like a must if you don't trust all the nodes) is that brute force password guessing turns from almost im

The big issue with client side decryption (which sounds like a must if you don't trust all the nodes) is that brute force password guessing turns from almost impossible to extremely simple since it's done offline.