Comment by apgwoz

You pretty much have to assume someone is going to put sensitive data in an input like this. Encryption by default is the only sensible choice.