Users forget passwords. Sometimes frequently. If data is lost every time a user forgets their password, that could cause them more immediate harm than good.

With that said, I'm in full agreement. End-to-end encryption of user data seems like it would solve plenty of problems on their end (with the exception of monetization).