True, the system partition is, but not where actual user data is. That won’t be encrypted unless the user enables FileVault, granted it does ask during initial setup if you sign in to iCloud if you do want to enable it, but it’s default is off