Actually, “is it encrypted” is just the tip of the iceberg: it’s all too easy to encrypt in a way that does not provide security against the threats the users want to defend. E.g. maybe the answer to this question is “yes” because the connection is over https, yet the server sees and stores the data in the clear