I didn’t say that there was any network plaintext transfer. I said the server needs to have access to the plaintext at some point.

it doesn’t happen according to them

That’s not actually what they say, because it would be the cryptographic equivalent of claiming they invented a new color.

They talk about encryption at rest without mentioning the rest of their infrastructure to confuse the hell out of people that don’t understand encryption. Given your comments it seems to work.