I'd love to just replace it with age for all use encryption use cases, but unfortunately age doesn't do AEAD without involving a password.