While that does mean it’s unencrypted locally, if it was still being transmitted unencrypted I think someone would’ve noticed by now.