> "But since it is user-to-user, you can only trust the user to store it how they want since they are gonna see it in the clear at some point."

That's a problem with almost every messaging system. I wouldn't worry about that.

> "What does encrypting the payload help with when talking to an onion is already E2E encrypted?"

It would be a requirement of PFS, but I meant encrypt at rest - my mistake.