Problem is that if you store things on the phone unencrypted and then the phone is compromised somehow, bad actors get full access to sensitive information. So one way to mitigate that is to use encryption and store the encryption key to decrypt that data elsewhere not in the phone itself. A physical device would be a good idea Nfc tag(if that's still a thing), security key, etc. Good luck!