Yes, encryption/decryption occurs on end-user devices, but there’s a catch.