Options for Multicast and Encryption over WAN (L3VPN and VPLS)

Looking for someone to confirm my thought process on the options below.

​

1. L3VPN w/ DMVPN - Multicast (replicated unicast) and encryption possible.
2. L3VPN w/ GETVPN - Multicast not supported, unless provider has multicast enabled core. Original header preserved; provider can't forward multicast destination. Encryption/auth possible.
3. VPLS w/ DMVPN - Multicast (replicated unicast) and encryption possible.
4. VPLS w/ GETVPN - Multicast (replicated unicast) possible and encryption possible natively with GETVPN independent of service provider multicast core.

​

​

​

​