How about we just have "copy-on-write" filesystems by default?

Something which then tries to "encrypt" your hard drive merely winds up creating another layer on top which you wipe out to get back the original files. You only have to flip a "hardware switch" when your disk fills up or you get a catastrophe.

I cry every time I see something that IBM or DEC got right 40 years ago that we STILL haven't adopted.