Re: very unfortunate move,
I don't see this as being any different to having physical access to a PC/server
I do, as this can affect files in other's accounts during normal operation and without having physical access to the unit and its disks. Just bog-standard ssh/rsync remote access,
And encryption doesn't help there; it's up and running, and the filesystem is unlocked at that point.