The system could work just as well for the user, stored only on the users devices, syncing in encrypted form only.

The plausibility in plausible deniability evaporates instantly with device/service/software provider's accessibility.

But faux plausible deniability seems to be just as effective of a fig leaf.