Isn't this true in general? This protects against someone walking into the datacenter and stealing a harddrive (which is Amazon's responsibility anyway). If yo

Isn't this true in general? This protects against someone walking into the datacenter and stealing a harddrive (which is Amazon's responsibility anyway). If you want to be sure the data is encrypted, store encrypted values/blobs/files/etc is generally Amazon's stance (for instance, for S3). For S3 they call this "client side encryption".