For highly sensitive data, additional application-layer encryption and tenant-level key isolation are among the few viable means of taking trust back from the platform layer into one's own hands.