Not only that but it's a liability having two pipelines, one secure and one insecure. Apart from technical overhead, since the "insecure" pipeline is surely better/faster/cheaper/convenient (or else why have it at all), it creates a perverse incentive when classifying data as "sensitive" or not.

We already went through this with https everywhere. Previously, encryption was considered "only for sensitive data".