As you don’t need the additional resources offered by the larger containers I would opt for the encryption module and make sure that the sensitive data is protected in that way.
Keep in mind that doing this will also come at a cost, namely the implementation of the encryption and decryption and possibly additional needed resources.