[paranoidrobot]

> encrypt the data with the users logon password or something derived from it

This leads to inability to restore a backup if you forget your password and need to reset it.

That's going to lead to screams/tears from a lot of folks who don't realise those implications.