
It's encrypted, yes: https://learn.microsoft.com/en-us/microsoft-365/compliance/data-encryption-in-odb-and-spo?view=o365-worldwide
You can additionally encrypt it with your own key if you find the above insufficient: https://learn.microsoft.com/en-us/microsoft-365/compliance/customer-key-overview?view=o365-worldwide