Always Encrypted with secure enclaves helps prevent malicious admins and malware from exfiltrating sensitive data, while enabling in-place encryption and rich confidential computations, including pattern matching, range comparisons, and sorting.
Source: Azure Roadmap