[api]

End-to-end encryption with keys only you control is really the only type that matters from a privacy point of view. Encryption at rest or in transit behind the scenes helps protect against some actors but does not give you privacy.

The zero-setup encryption offered by cloud providers is also smoke and mirrors. It's a key they control, so while it may improve security against someone internal snooping on a raw SAN device it doesn't do much for your privacy.