To elaborate on the above, Joplin supports end-to-end encryption and not local or "at-rest" encryption. The point of it is to make sure that no bad actors can get access to your data whilst it is out of your hands and in the possession of hosting providers etc.