[kaba0]

Leaks can happen in many ways, like simply by SQL injections, some page displaying data without server side validation/with bugs, etc.

[trympet]

You are correct. Maybe I'm missing the point, but everything you mentioned is still applicable even when the data is encrypted.