Realistically it&#x27;s not going to be that simple though.  The filesystem proper (e.g. ZFS) may verify checksums when pulling in data from a storage device, but then it&#x27;s going to sit in the page cache for some arbitrarily long time.  Whether by faulty DRAM, cosmic rays, or writes through stray pointers, that&#x27;s a potentially major source of vulnerability to data corruption.  There&#x27;s of course a mirror-image vulnerability on the write path: you write into the page cache, and if something borks your data between that point and when it actually gets written back to storage, you end up persisting it (quite arguably worse, if perhaps less likely due to dirty data usually getting flushed within a reasonably short time).<p>Basically, the filesystem isn&#x27;t the end point, and thus simply isn&#x27;t positioned to really provide &quot;end-to-end&quot; protection.