It does but it isn't a panacea, if you leave the keys accessible or the wrong subsystems vulnerable it won't save you but a properly isolated encrypted reposito

It does but it isn't a panacea, if you leave the keys accessible or the wrong subsystems vulnerable it won't save you but a properly isolated encrypted repository greatly mitigates the damage possibilities to 'rendered inaccessible' or 'exposed but it will take decades before they can even think about decrypting it with a multi-billion dollar budget'.