[geekbeast]

From a practical perspective, yes. From a threat model perspective not really.

[rdl]

It protects from a bunch of lesser threats, like backups leaking keys, anyone hacking a front end box getting keys, needing to rotate keys when employees change, etc.