Thank you for bringing sense into the discussion. I don't know how many times I've been asked "but will our data be encrypted on your server, in case someone hacks it?" and I need to explain this basic concept to otherwise intelligent people. It's like demanding that the driver's side door in a car must have a child lock installed.
I'm interested in a genuine discussion about how to answer that. For all the commonsense explanations you could give like that ones in this thread, all a client tends to hear is "anyone can hack it".
For all the horrible stuff ups Equifax management has had, it sounds like congress would be substantively happier with them if they said "yes our SAN has an FDE feature". The media would certainly be kinder to them.
I'm in two minds about rolling something objectively pointless just so I can address these sorts of concerns.
