Why Ledger, Always Encrypted, & AAD support in Azure SQL DB are vital for Zero Trust Architecture

So, for Always Encrypted if you ask the question:

“In the event of a complete and utter server compromise, can the attacker decrypt ciphertext encrypted using Always Encrypted?”

The answer again, is “No!” because the AES keys aren’t in memory.

If the database server is compromised, this is true.

If the application server is compromised this would be false.  As I understand, the encryption keys for the SQL driver reside with the application server.  The compromised application server could still send requests to the database server for data and the application server would decrypt the data.