Your file is encrypted. What happens when an application opens it?

At rest: encrypted on disk.
In transit: encrypted over the wire.
In use: decrypted to be processed.

That third stage is where most confidentiality assumptions break. Confidential computing addresses exactly that gap.

$RLC