> I am pretty sure 99% of people would halt at 'gpg'

Please do not mock gpg.

I have been using gpg for 25 years now (and PGP before that). It works. It encrypts. It decrypts.

It is in vogue to mock gpg on HN and recommend more modern solutions. As an experiment, I tried adding one of those modern tools (rage) to my ansible configurations, just so that they get regularly installed and maintained on my servers (without actually being used). The setup broke within less a year.

Are the modern tools more cryptographically secure? Undoubtedly. Does it matter in practice for me? Not at all.

Longevity is a big deal and is under-appreciated.