My guess - he’s avoiding political risk. If something goes bad, it’s better to say “it was encrypted but they got the keys” than to defend data wasn’t encrypted.

It’s semantics in terms of actual difference to an attacker, but it’s a world of difference when explaining to executives.