&gt;on disk encryption<p>Given you could just run LUKS on top of (open)ZFS, it&#x27;s probably the better security position to run an audited, established encryption product, than to consider a layer thrown on top of ZFS a feature.