Optional File-Payload Encryption

End-to-end encryption is optional, not the default for every workspace and path.

In the supported store-first flow, it applies to file payload upload, preview, and download. Filenames, folder names, and other folder metadata remain outside that E2EE boundary.

Mirror-style paths are not covered by the same file-payload encryption behavior, and external guest sharing does not yet have feature parity with the member E2EE path.

Confirm the exact path before stating that a particular file or workflow is end-to-end encrypted.