One good reason to not do link encryption is: "the problem is that
whackadoodle box you put outside the router!" 
most often those
boxes can't do light-level monitoring, loopbacks, etc... all the stuff
your NOC wants to do when 'link flapped,doh!' happens.