That’s one of the reason I’m not so keen to add encryption to the client side. Eventually people will realise that 1. their device is already encrypted (or if it’s not, that it’s easy to do so) and 2. that they shouldn’t share their account with other people, and instead create a separate account. That would make all the efforts and complexity required to implement app-level encryption a waste.
It seems to me the main use case for app-level encryption is sharing devices or leaving devices unlocked in the family home, which even app-level encryption can’t protect from (if the device is unlocked anyone can install a keylogger, etc.).
