For encrypted disks, you've now got high-performance data shuffling between userspace and kernel space - a massive new attack surface