and yes it is a privacy risk... the data gets decrypted into the app's memory and some XSS breach would allow cleartext of messages to leak

yes, it is!

but by proactively preventing people from doing this by refusing to do stuff like - not encrypting the configuration, you make it really hard for users to have another choice than the one you have forced on them