Bedrohungsmodell, Whole-DB vs. pro User, Methoden (SQLCipher/Volume/LUKS), Schluesselmanagement (Start-Injektion/TPM), Off-Site-Backups, Heim-Server-Delta. Diskussionsgrundlage, kein Code. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>