Keeping it in the client SDK means it’s possible to implement storage the server can never see into, in a manner that can be verified by red teams.