Use cases for encryption over Expressroute?

I understand the basics of Expressroute being a private link from on-prem to Azure and hence more secure, but what would be the use cases to enable encryption on Expressroute via an Azure VPN gateway or a 3rd party gateway?

Thx