I am not authoritative, but a glance at the documentation suggests encryption is not explicitly part of this spec. Since a blob may be anything, one instance of a blob can be a file encrypted by external means.

I believe Private by default just indicates that objects are not exposed until they are shared: like a file system is private by default and a Github repo is not.