[ltbarcly3]

This is correct, the memory encryption stuff is to prevent side channel attacks, not secure data.

[quotemstr]

Memory encryption is secure under a certain threat model. It makes cold boot attacks, DIMM transfer attacks, and rowhammer much harder to pull off. It doesn't protect against everything and doesn't pretend to do so, but IMHO it's valuable anyway.