Security issue with Files integration?

[Idontknowman]

Sorry to ask if that question has already been asked. I saw that when I open a picture from my Vault in the Files app, it - logically - downloads and then I can view it. But when I locked and unlocked my vault again, the cloud symbol on the picture was still gone and I could still see the preview, meaning the picture was still locally on my iPhone even when my vault was locked. This seems like a huge security issue to me. Can you tell me where files that I open in the Files app are downloaded to? How is the encryption ensured when it’s downloaded? And why is my file still stored locally when I lock my vault? Or am I misunderstanding something?

[tobihagemann]

Just answered your question here:

Cryptomator 2.0 for iOS: Open Source and Beta Release

We are restricted by the technical implications and limitations of the File Provider. Indeed, the downloaded and decrypted files are then locally cached (in the app’s sandbox). Btw, you can always clear the cache in the Cryptomator app. When thinking about Cryptomator’s security target, this is not a huge security issue: In addition, you have to keep in mind what Cryptomator is not. Protection of the files on the local computer is not the focus of Cryptomator. Of course, it’s still the goal…