Security as been invested more in SQL Server 2016 than any other.
Protecting your data at rest and in motion with no impact on database performance. Always Encrypted in 2016 will make it a more simpler task to protect your data. This is huge for the data professionals out there that struggle day in and day out with how to protect their data.
When you are using Always Encrypted you can instinctively choose which columns you would like to encrypt (keep in mind the size of the table does matter when you build it).
Moving on to Stretch Database….
Cutting the storage costs with stretch database and yes…you can utilize Always Encrypted into Azure.