According to the page on NC Enterprise encryption, there options both for E2EE and Encrypted at rest. Judging from the large organizations that use NC (Amnesty, Siemens, governments, banks for example), I would be surprised if everything was lying there in their servers unencrypted. https://nextcloud.com/encryption/
Thomas Tanghus (npub1ngm…uw4s) jowek (npub1q9k…7fuq) Morten Juhl-Johansen (npub1tw4…jzl3) Farvel Big Tech (npub1c9h…gfkj)