When security tools quarantine files, why do they tend to use encryption, rather than simple file corruption?
The main goal of quarantining a file is to make it impossible to run on a system. This particular goal is easily accomplishable by simple file corruption, for example, changing the file's extension and adding 64 bytes. It makes the file impossible to run and it's much more light operation than encrypting the whole content of it.
What are the benefits of encryption, over corruption and why is it the preferred way of quarantine.