I think this is more of an issue on desktop apps. sqlcrypt might be a solution for full encryption of the local database, with a KDF relying on a password and/or key stored in OS keychain.
UPD: turns out it was discussed in a different thread: Researching a 'Zero-Trust' storage layer for deltachat-core-rust — thoughts? - #6 by link2xt