nice to see more people using Hetzner

if this was an NVMe, you could do secure erase with the nvme command, which maps everything to empty on the firmware + deletes the encryption key of the existing data

(most NVMes are self encrypting already)