If you don't encrypt the backups, they are unencrypted, yes. That's why you should encrypt your backups. It's baked right into WhatsApp on the screen where you manage your backups.