> What's the threat model of such an odd design choice? Don't lose your device while it has data on it or hope the OS has good enough security to stand up to a

> What's the threat model of such an odd design choice? Don't lose your device while it has data on it or hope the OS has good enough security to stand up to an adversary with local access to the device. The sql encryption on the database is mostly useful for backups which wouldn't send the key along with it.