What is the purpose of encrypting just the values and not the keys? If you need to run the file through sops to decrypt the values before using it, why not just encrypt the entire file?

Is it just for easier debugging, so you can see the structure of the encrypted file?