UniFi Protect - encryption at rest (local, cloud/external), encryption in transit

When I set up my UDM Pro Max with a HDD I didn’t see anything asking about encryption for the recordings stored on the drive, nor did I see it for clips offloaded to another area (GDrive, another NAS, etc).

I did see an option for encryption in transit for the UniFi camera connection, but haven’t turned it on.

Can someone summarise the options or best practices for this.

The cameras are in their own VLAN so I’m not too worried about data in transit encryption, but I am worried about the stored recordings. If someone removes the drives from the USM then will they have full access to all the recordings, likewise with the off-site storage area?

I am not aware of any encryption at rest features for the recordings stored on the system.

Pity, seems like an overlooked feature. Hopefully they can release an update some time to remedy this.