Isn't an encrypted wallet.dat automatically a "watch-only" wallet?
An encrypted wallet may be cracked if its password is weak with enough budget and computing power, while a watch-only wallet doesn't give any information other than the address and what can be derived from the address.