I'm 100% sure the SR server uses full disk encryption, but as you said, that doesn't matter if the server gets pwned and LE steals the encryption key from RAM. This is why you should PGP encrypt your address.