Anything harder than usual in the same application means it won’t usually be used.

And encryption is about collective immunity. So everything should be encrypted.