Questions about certain ReFra features added in version 4.2.2

[pingu-the-penguin]

Isolated Metadata Parsing — EXIF and metadata extraction runs in per-file sandbox processes. Three modes available: Shared (default, single reused process), Hybrid (per-file for opened files, shared for batch), and Per-file (true per-file isolation for everything).

Will this be kept configurable for user choice or would a default secure option be selected?

Private Folder — Store sensitive files outside MediaStore using Android's Storage Access Framework (SAF). Files are hidden from the normal timeline, not indexed by other apps, and protected behind the app's security gate.

I'm not sure of the security benefit of this features and whether it should remain an option in the app or not.

Encrypted Storage — Opt-in encryption for app preferences (AES-256-GCM with Android Keystore) and Room database (SQLCipher). Protects trash index, categories, and internal data at rest — even on rooted devices.

I mention this because it wasn't clear whether it was opt-in or not as it was auto enabled on my device but it was later clarified that it is default enabled for supported devices so shouldn't hurt anything.

[pingu-the-penguin]

Sandboxed Image Decoding — HEIF, AVIF, and JXL images are decoded in isolated system processes via SharedMemory. If a malicious file exploits a decoder vulnerability, the damage is contained in the sandbox and cannot reach the main app.

I realised this is an opt-in feature in Refra so it could be beneficial to enable it by default and maybe remove the options for users to disable it.

I've also attached screenshots from v4.3.0 about the new security features from their "Help & tips" page and the feature itself:

[secretmango]

Opt-out sounds good, removing the switch might cause issues