WireGuarding the mainline

To add to this (maybe not average Linux desktop distro's), Google has a strong policy on encrypting data in flight or at rest. The filesystem is encrypted on Pixel phones, and servers in our datacenters. Both have some form of hardware acceleration for encrypting many blocks worth of data.