> But who is stealing data off of servers by taking the server? Away from pure bare metal, in the presence of bugs in security separation someone could steal d

> But who is stealing data off of servers by taking the server? Away from pure bare metal, in the presence of bugs in security separation someone could steal data simply by having a VM on the same server as yours. Encryption at-rest with each VM or service/account having their own keys removes the risk of data accidentally becoming visible in another environment that is sharing the hardware. Though the chance of some useful data being revealed this way is pretty small on large scale cloud installations, and if you are using a cheap VPS host for sensitive data you might not be valuing your data enough.