The problem with that approach - encrypt only things you need - is that it signals to the adversaries (whoever they are) that this is the piece of data they sho

The problem with that approach - encrypt only things you need - is that it signals to the adversaries (whoever they are) that this is the piece of data they should try to get. By encrypting everything, you make the adversaries spend enormous resources just trying to figure out which data is worth spending resources on. But I honestly don't know which approach is better in lieu of TFA; however I'm leaning towards encrypting (almost?) everything. P.S. Someone above me mentioned, bugs and complexity only get noticed and fixed if there are enough people using encryption, and I think that's a great point too.