Care to elaborate about that? I don't see the security concern if the data is encrypted on disk and both ways over the network. I doubt they would just leave the private keys to hang out on the server for anyone to take.