Sorry, I did not specify the threat model. If I git push to an encrypted volume on a virtual server, like on Linode or Digital Ocean, anyone with access to the hardware can inspect unencrypted data on a live volume.