we've heard these objections for a couple of years,
but have yet to see real problems.  in most cases
people accept a local swap disk, which fixes the
whole problem and still avoid captured data on the server.
you can even have two swap disks mirrored.