True, but syncthing does not encrypt at rest. There is an open issue about it [1], but it appears that the assumption that you want to personally control all the machines you run it on (and therefore can trust the admin of those machines) is deeply embedded in its architecture.
