At-rest disk encryption

Context: FogWave on Discord asks "Does exe.dev provide encryption at rest for any data in the VM ? or should the VM do its own encrypted file system ? (granted encryption in a virtualized environment is not foolproof)"