@mirabilos
Even if that's the case, data at rest encrypted five to ten years from now needs encryption keys that are secure 10 to 20 years from that point.

Given how glacially slow it is to update encryption protocols and to verify that the algorithms are safe, it makes sense to rather be too soon than too late.
@bascule