I was looking into Salesforce Shield Encryption.
Apparently Salesforce Shield Encryption does not mask any data, but encrypts the data at rest, which means only at the database level. Anyone who has authenticated access to the data can see the encrypted data.
The official video shows record information becoming masked in the UI. This is truly confusing, since the user is authenticated on the video and should not see the record values masked.
It seems there is invalid information about Salesforce Shield Encryption shown in the video. Am I right or wrong?
Also one more additional question: Does Salesforce by the existence of Shield Encryption admit the possibility of the data being hacked, and therefore admits that the system might not be 100% safe?