Sorry-- why is encryption at rest a big deal for most workloads? Doesn't that defend largely against "someone breaks into the AWS datacenter and steals a pile of drives" use case?

Let's ignore highly sensitive data (cardholder information, PHI, etc).