[skybrian]

It's worth noting that this is true of desktop systems and servers.

Mobile operating systems have per-app sandboxing and per-app storage, not just per-user. But in that case, you probably don't need any more storage encryption than the OS already provides by default.

My guess is this will eventually be fixed by running older apps in separate containers (like how Linux runs on Chromebooks and Windows.)