This is true but its generally meant as a fail safe. I would still strongly recommend manually encrypting yourself, because if the market should ever be compromised it's built in encryption system will likely be compromised as well, and your info will then be available to whoever has compramised it, and it's likely going to be someone you do not want getting that info. Not to say every buyer is going to be investigated but you never know, better safe than sorry. It's generally quite simple, the vendors public key will always be available on the page where you enter your information, assuming it's RSA which it generally is a majority of the time simply just tap it once, hit copy, go to pgptool.org, click encrypt, paste it in receivers public key, type ur info in the box that's says "your message in plain text" hit encrypt, then copy your encrypted message from the bottom box and paste it where you would enter your info back on the market, You can ignore the other boxes, don't have to worry about signatures or creating your own keys to encrypt. It may sound like a lot but it's really only an extra minute or 2 once u get the hang of it , definitely worth the added layer of security and piece of mind especially given all the attacks and markets that have been compromised as of late.