You can encrypt the entire vault and all the contents,… but imo, that should be a default setting.

Seriously, as-is, you log into Nextcloud, click on passwords and every password is literally right there. I’m sure they’re encrypted in the database but fffff.

(I tried it out on my install just now)

(I use KeePassxc mostly)