Not really. Most of the time setting up a segregated network architecture is actually easier than dealing with encrypted database connections -- certificate man

Not really. Most of the time setting up a segregated network architecture is actually easier than dealing with encrypted database connections -- certificate management is by nature dynamic vs. the static nature of a secure network