Multitenancy in Loki

Hello,

In the documentation, it was mentioned that multitenancy can be enabled in Grafana Loki and it stores log within directories based on OrgID. Could you let me know till which extent the tenants are isolated in Loki storage (S3 buckets)? Such as, would it have per tenant encryption of data in the S3 bucket/ possibility to encrypt this data per tenant?, would other tenants be impacted if one tenant sends a lots of read/write requests/errors, would it be possible to configure different S3 buckets for different tenants?

Thanks!