Data can be sent off either encrypted or decrypted, with encrypted by default. Javascript extensions are unlikely as they would make the app really busy and probably unmaintainable.
OK, thanks :). The itch I'd like to scratch is some features from TaskPaper; my ideal "Notes" app is an open-source, cross-platform combination of TaskPaper and nvALT. However, adding nvALT-ish-ness and TaskPaper-ish-ness would require some heavy UI extensions. I'll ignore the extensions API for now and have a twiddle with the guts of the webapp. Cheers!