I don't see how encryption at rest helps with an online attack. Once the file system is mounted the filesystem is unlocked. This is way things like LUKS which

I don't see how encryption at rest helps with an online attack. Once the file system is mounted the filesystem is unlocked. This is way things like LUKS which has bee around forever work today.