>Is the user data encrypted when the maintenance mode is on?

Yes, the primary device user data remains encrypted. The temporary user functions in a sandboxed state.

>Can thiefs access it and make phone usable?

The expected functionality prohibits access to the primary user data. Even if they were able to break from the sandboxed space somehow, the primary user data maintains an encrypted state.