I admit I haven't tried it yet, but based on the description, provider-defined functions makes me nervous. It's easy to picture it as yet another tool for people with bad taste to create a horrible, impure monstrosity (people love to do this with terraform already by wrapping it).

I'm very excited for state encryption though! Wondering how safe it is to check an encrypted state file into a public GitHub repo.