imo uploading documents which include personal sensitive information to somewhere unclear would be risky. I recommend those who want to use the product to pay attention to this detail.
My intention is definitely not to argue or to criticize the product. Please do not misunderstand but who is legally responsible in any legal case? imo personal sensitive data breach should be handled clearly. In case of any breach, when the issue is brought to court, the victim will want to find an interlocutor. I think it would be more accurate to show in more detail that the data is encrypted in terms of user trust. The idea may work, I wanted to share my comments as a prospective user.