[skuhn]

Data is indeed encrypted on the storage systems (but not on client machines, if that's what you meant).

[JoshTriplett]

If it were only the end-user client systems, that'd be less of a concern, but the servers that run web frontends and similar also have full access.