Clients (like ours) can and do encrypt content before pushing to blossom though