Not just that, but also a guarantee of no compromising bugs in either the cryptographic API or the application code that calls it.

Yes. If you want your data protected, it always matters where you store it.