Yes, but it's not the default. From the article:
> One could, however, add a second passphrase that is never sent to the server, and encrypt the data using that. Chrome provides this as a non-default option.
The average user doesn't have the expertise to know that they have to configure an additional "master password" to keep Google from mining their data for ads.