You are correct. Maybe I'm missing the point, but everything you mentioned is still applicable even when the data is encrypted.