They are encrypted, just like everything else in the app, just not E2E. There's a big difference between no encryption and encryption that isn't E2E.
Transport encryption has been the default for almost all internet traffic for some years so it's no longer something that you can reasonably not have.