The Family of Always Encrypted Is Growing, Right?

The always encrypted family is growing, that's for sure. It really is a pretty broad family, so you can choose what you need in terms of custom performance and security. Even VBS or SGX enclaves don't support the entire SQL syntax. So my own personal recommendation is sure, you have an existing system, look at what it might take to migrate to always encrypted.