that's what people need to know when using phoengap.

but i guess someone could write an encryption/decryption filter before passing data to webkit?