[bentcorner]

This needs to be at the top. The fix here is very simple then - prompt the user for a passphrase when doing a backup, allow no passphrase for a "friction free" if you really want to, but give the user the option.

[charleslmunger]

You don't even need a passphrase. Just generate a random key and store it somewhere, like whatsapp's servers.