This is assuming the breach is stealing a disk though, right? If the encrypted storage is part of an application, and I infiltrate the application or can trick

This is assuming the breach is stealing a disk though, right? If the encrypted storage is part of an application, and I infiltrate the application or can trick it into serving me data, then the encryption cannot help. Any runtime breach isn't really prevented by encryption at rest.