Hacker News Reader

You should enable encryption at the controller level, many modern SSD support it and it shouldn't influence the performance.

Indeed! Which is why I said "software full disk encryption" in my OP. :)