Thanks for elaborating! This is definitely not ok, and the response beyond unacceptable.

I've been an active user for a couple of years now and have substantial amount of information stored in Roam. I guess I should have known better than to have sensitive data stored in someone else's servers without encryption.

Time to explore Obsidian and see what the migration path looks like.