More to the point, for the software solution, you have to trust the user to actually do the encryption and to use a strong passphrase.