I am developing a Windows 10 Universal Application which has the ability to send files over the local network to other copies of itself on different devices. I will also extend this to remote control one instance of the application from another (limited access).
The applications are sandboxed by default due to the windows runtime API, and files can only be saved in some specific locations (no access to C > windows). Furthermore, users can block any network interactions (done by default) and block individual file transfers (although they can opt in to automatically accept any file)
For the moment, traffic is completely unencrypted and "out in the open". Should I bother with encrypting the traffic somehow? I am thinking that if the network is compromised, it is highly unlikely my own encryption will save the user and malicious users will find their way anyway.