Yep, makes sense 👍 I was testing in NIP-17 DMs so was expecting file uploads to be encrypted, but it turns out my app was out of the date and wasn't doing it.