Ideal solution would be small secure enclave storage for keys then user-upgradable main storage encrypted with those keys.
Edit: wow, really struck a nerve there. I take it back, Apple is in no way motivated to massively overcharge for storage upgrades.