Apps can be observed by the host OS, so if you're looking for an app that is secure relative to the host OS, then you're looking for unobtanium and instead need a host OS you can trust.
OTOH, the big lesson of Clipper is that every OS, every app, every platform, can be hacked by nation state adversaries.