It doesn't, no. Whoever told you that is wrong.

Bad actors can get TLS certificates issued for their phishing sites just the same as you can for a regular website. Encryption is for everybody.