Point is it will be secure in other ways. In fact it won't matter if the Ditto server gets pwned. Users keep their own private keys which they use to encrypt events themselves. There's nothing to leak. All you could harm is the server admin, not the users. It will be 10x more secure.