Oh it seems I was mistaken about that. ZFS does encrypt enough metadata indeed. Sorry for the noise.