Among other things, it puts users at risk of having their highly personal data exposed during a hack/exfiltration/subpoena, or to a malicious internal actor.