[spauka]

It seems like the summary of this article is: No

Encryption is mandated for data at rest and data in transit. There is a provision for encryption of data in use when homomorphic encryption becomes feasible, but the loophole referenced in the title is that it is not required now.

[taspeotis]

Also the article just fucking goes on before getting to that point.

Although I suppose if the author didn’t attempt to prove a negative there’d be no reason for the blog post to exist.