Encrypted at Rest by Default: MongrelDB and Roamarr
MongrelDB encrypts every page, WAL frame, cache entry, and index checkpoint with AES-256-GCM, and Roamarr stacks field-level encryption on top, because encrypted at rest only means something when the defaults cover the boring files too.