But instead of providing proper safety from the get-go, Google doesn't enable on-device encryption by default. That means ...