The point I got from that that it's unacceptable that it's keeping data on their servers. The issue wasn't that it's encrypted at rest - the issue was that they got data they need to encrypt to begin with.
All details here: https://www.warp.dev/privacy