it does store the data encrypted at rest and there is plans to lock the app tho some android can already do that, but what app can prevent data leak if a device is compromised? are you refering to revoking access for a device? i would assume that is planned

yes the data is local, not all may be tho which is unlike signal for example, keet can store part of the data but it must live somewhere to exist