How do you see an attacker obtaining the key from memory if not by some kind of cold boot attack or memory swap? Encryption defeats these attacks. An attacker who can read kernel memory via software is 90% of the way to beating you anyway.