What about things like Trusted Execution Environments? I know that people love bashing them for being broken, but realistically speaking.. if you don't have malicious nation state level actor in your threat model(since legally there is no way to get the data, only by breaking it, and even then with a lot of asterisks), they could help a lot with moving things server side in an encrypted form.