Event triggers trigger on DROP EXTENSION. We could use this as a sanity check, and prevent DROP EXTENSION to complete if the database has any encrypted files - even if it’s a toast or index or sequence not marked by the access method.