Enable encryption on the VM disks in marketplaces by default. This helps users that require security certifications. This should use customer's key (some default key the customer has) - find out how easy this is.
Does this have performance impacy? I think it's very low because the encryption is today HW based.