Whilst the point about this stuff being well known is sound, I shall just point out that FTPS alone is quite likely (according to circumstances of course) to be

Whilst the point about this stuff being well known is sound, I shall just point out that FTPS alone is quite likely (according to circumstances of course) to be not enough. I know of at least one system that already used FTPS for a decade or so that now has to be modified to use GPG encryption as well, for GDPR compliance. Security of data once they have arrived is as important as security of data that are in transit.