do you use something (on top of full-disk encryption) to encrypt extra sensitive files?
i've used ecryptfs for the longest time mainly becomes the kernel ships it as a builtin module since forever but it looks like it's deprecated (didn't know that) and will likely be removed this year: https://lore.kernel.org/lkml/ZB4nYykRg6UwZ0cj@sequoia/
so i'm wondering what should i use instead. i don't want to use block device encryption because it's overkill
i read about cryfs but it seems unstable and likely to corrupt your some of your files, fscrypt requires ext4 so it's out of question, and there's gocryptfs which seems like the most stable option. anyone tried it?