OrangeFox recovery skips android encryption

[yuvrajraghuvanshi]

I have been messing with my androids for many years now and recently I stumbled onto a thing. My phone has a screen pin and encryption status is "encrypted" but still OrangeFox recovery loads contents of /sdcard /data without any problems. Doesn't matter if that's a newly flashed recovery or just "fastboot boot orange.img" or "fastboot flash recovery orange.img" either way I see this as a huge security risk for my data to be so easily accessible. What am I missing?

 

[twistyplain]

I have been messing with my androids for many years now and recently I stumbled onto a thing. My phone has a screen pin and encryption status is "encrypted" but still OrangeFox recovery loads contents of /sdcard /data without any problems. Doesn't matter if that's a newly flashed recovery or just "fastboot boot orange.img" or "fastboot flash recovery orange.img" either way I see this as a huge security risk for my data to be so easily accessible. What am I missing?

Mine does the same but it's an alpha build so it has a long way to becoming stable. I'm thinking about changing to another recovery because of this security flaw. I think @DarthJabba9 already knows about it. If he didn't he will know after reading this quote.