Consider Encryption ...
Which layer should encrypt data?
Higher: data is in the clear in fewer places, keys are nearest the user, every application must encrypt
Lower: more opportunity to intercept, how to provide key material, applications are simpler (don’t worry about crypto)
User vs Administrator locus of control