Thanks for the replies.

dm-crypt / LUKS would seem appropriate ways to deal with securing down some data / files. I can imagine any of this is not standard as we want to squeeze as much processing power as we can from these devices, so any encryption / security layer is not on by default.

But is it realistic to expect people to use this hardware in any practical way, trusting their data to it without any protection whatsoever ?