[bawolff]

I think the assumption is that encrypted pdfs would not be used here because users still have to view these documents

[dvfjsdhgfv]

No, the PDF standard explicitly allows encryption without the need to set up user password; in this case, the owner password is set. The only change for the user is that the word "Secured" usually appears next to the filename in the reader.