My actual broad two-stroke approach to information security is:
1) Endevouring to deny usable information to those who should not have it, and
2) Endevouring to ensure continuing access to usable information to those who (currently) should.
If truth be told, I'm much better in my personal life in adhering to the first (the number of times I've lost sole copies of data to drives that suddenly went kaput, or forgotten the password to some online resource I maybe didn't manually log into often enough) but I like to think that I have on balance managed to maintain both during professional engagements in the field (which I'm not doing in my current situation).
And if you rely upon being safe merely through knowing that, even with the correct decrypption tools, some password/key is required (or multiple!) then it can be good, but even better if nobody has unfettered access to the decryptor and/or enciphered data as well. This is a balance. A single copy of data on a "self-destruct if wrong password is used eight times" USB dongle might not be any good at all if Alice and Bob would suffer as much from interference by the disinterested Mallory (actively malicious, a disruptor) as from any hypothetical Eve (eavesdropper) assisted by Craig (password cracker) and the rest.
Defence-in-depth (and defence against chance, as well as intent) is the thing. Like security through obscurity doesn't hurt, but shouldn't at all be the only thing you do to wrap up vital data. This whole discussion being pointless without going into an actual case-study, though, as every situation has its own range of potential 'solutions', and every likelihood of being blindsided by some future revelation of a risk (either way) not even considered, whether some zero-day method of rapidly cracking your toughest encryption algorithms or some novel ransomware/data-denial vector indiscriminately sweeping the world... And I'm under no illusions that I could ever prevent
all such trouble, perhaps jot even know how to predict what's even possible. And it's not my job to, right now, even if the pondering remains somewhat of a subtle hobby of mine, and the (slightly rusty) experience is but a little polishing away from being of some small use once again if someone so desires it of me.
(Which I'm sure won't happen; there are definitely better people than myself out there, fully polished and kept sharpened sufficiently already... But I like to think I'd be a good third-tier candidate straight off the bat, if anyone is desperate enough to try to find me willing.
)