Use case
Encrypt Social Security numbers
Keep SSNs out of plaintext columns. Pack related PII as one JSON string.
A database dump of plaintext SSNs is the failure. With en-decrypt that dump has encrypted values — not a complete unlock.
This is not tax or SSA advice. It is how to keep the number out of plaintext storage.