Still, with so much app-level code running in the same process with the encryption layer, any bug in that compromises security.