The disk is still encrypted even when turned on, it’s just transparently decrypted when read. I doubt Ente is any different - you store images encrypted on disk, decrypt them to be able to read them as an image, then send it re-encrypted over HTTPS.