Depends on your threat model and priorities. Historically the biggest thing I wanted to pull off the SD card was encrypted backups, which were in fact encrypted

Depends on your threat model and priorities. Historically the biggest thing I wanted to pull off the SD card was encrypted backups, which were in fact encrypted enough that an attacker getting them wouldn't be a serious problem, but which were rather handy to have. (And yes, I can completely push those off-device, but an SD card is a handy middle ground of local, fast, easy, safe from the things I tend to be worried about (mostly, bricking the device), and big enough that dumping 10s of GB on there is fine.)