Hey, generally all files in rest are not encrypted and the TLS certificate you acquire during setup is only used for HTTP TLS communication. Nextcloud mainly benefits from Nitrokey products for the login procedure, one can login securely (using 2FS or password-less) into Nextcloud using a Nitrokey FIDO2 or Nitrokey 3.