Of course it is an encrypted messaging. But it is safe as long as root certificates are not being imposed to be issued by government agencies only. Which is very easy to mandate in a totalitarian government. Want your website to serve customers in our jurisdiction? Then you ought to use certificate issued by us.