That's basically it. Encryption is a little like 2 factor auth in that way, if you really only have one control to reading the data, the encryption isn't a solu

That's basically it. Encryption is a little like 2 factor auth in that way, if you really only have one control to reading the data, the encryption isn't a solution for that particular risk. The way I see it -- what I want to protect against is an attacker being able to slurp up all of my online, potentially accessible protected data, while at the same time, I generally want to access it for legitimate purposes. And that's difficult -- so what we wind up doing is making it expensive/time consuming/audited to access the protected data.