We definitely do use encryption for both data transfer and storage. I didn't mean to imply that those things happen in the clear.

And yeah, hopefully we can find a way to help users along the path of managing their own keys.