An encrypted trash is a nice touch because the recovery window is exactly where most privacy apps leak, deleted files often sit in plain storage or cloud backups for days. The tricky part is key handling: if the trash key lives next to the files, encryption mostly protects against casual browsing, not a device dump. Where does the key for the trash live, Android Keystore or something derived from the user unlock?

iin1006h03