@kramse @JulianOliver yes, encryption is great and that's the #1.

SSD come with firmware-level implementations that overwrite all sectors (also the hidden ones). You will of course have to trust the manufacturer to implement this properly.

This is a great resource: https://tinyapps.org/docs/wipe_drives_hdparm.html