Can’t be certain that no one has copied the unencrypted user’s data either.