Individual emails are only encrypted if the sender encrypts them, yes, and it's only enabled by default between protonmail users. However, the mailbox as a whole is encrypted at rest with some one-way method that doesn't allow proton to decrypt it: https://proton.me/blog/zero-access-encryption