Whole-disk encryption protects against stolen hardware but not a compromised application. Encrypting the most sensitive fields individually means even a full database dump yields ciphertext where it matters most.
“A leaked database should hand over riddles, not records.”