The challenge is that if there is some variant of input log at some time, whatever methods you use to encrypt the storage will also be logged, that is unlikely but possible.