It turns out many OPAL storage devices fail to implement secure handling of the data encryption key: https://www.theregister.co.uk/2018/11/05/busted_ssd_encryption/ making the whole self-encrypting drive idea much less useful.
Linux geeks doing what Linux geeks do...