That's a valid concern, though. Why should one invest their time in firewalling their phone or reverse engineering app, when cloud sync could be put into a separate package?
That's simply a question of demand and resources required. This is certainly not a trivial task that requires engineers building it. If more people would voice these concerns it probably something Swiftkey would consider.
