when it comes to security, its as secure as any sort of local storage solution (eg. sqlite, file system, etc). it's more secure than plain files since the user can password protect it. the biggest concern would be some sort of elasticsearch specific injection attack where loading certain data would cause it to run code and on that end, elasticsearch has a good record for not doing that 🙂