In the future, we want to offer fully encrypted runtimes, including containerization volumes.

See:

[1] https://developer.ibm.com/articles/advancing-image-security-encrypted-container-images/

[2] https://aws.amazon.com/blogs/containers/introducing-amazon-ecr-server-side-encryption-using-aws-key-management-system/

[3]

In this way, both your data AND your images would only be accessible via a keypairing that either Railway, or even-more-ideally only yourself, controls