If you can't correctly encrypt messages on disk and in transit you can't guarantee that you secured user's personal data.