This seems like a great approach when the client devices are all friendly and collaborating. What sort of countermeasures do you need when some of them might be malicious attackers?
Their explanation leaves me wanting more. If the phone is compromised, surely the encryption process might also be compromised.