> And to clarify, this means encrypt it before it gets to the VPS. Just having full-disk encryption is not enough because cloud providers can dump RAM. There are tools that easily extract encryption keys from RAM.

True, but at the very least, you won't have to worry about discarded SSDs having your data in plaintext.