Could a crash leave my private handwriting readable on disk?

The app guards against this. While converting a note it briefly works with plain (unencrypted) temporary files, then seals them into the encrypted cache and deletes the temps. If the app crashes mid-conversion and a plain temp is left behind, a cleanup sweep on the next startup deletes any leftover temp files so your handwriting isn't left sitting readable on disk.