TRUE in encrypt_option does not mean strict mode. Here is how to read the protocol value on your server and what to test before you enforce anything.
Finding Encrypted Stored Procedures Before a Migration
Inventory encrypted stored procedures and other modules before migration, then recover their approved source and dependencies.
Connecting to SQL Server From Home Without Exposing Port 1433
Keep port 1433 off the public internet by checking external reachability and using VPN, a jump host, Bastion, and trusted encryption.
Masked Values: What Dynamic Data Masking Does Not Hide
A masked column shows zeros, but a user with SELECT can still filter, sort and guess the real values. Here is the proof and the fix.
Restoring a TDE Protected Database on Another Server
Restore a TDE protected database on another SQL Server by moving its certificate and private key, then verify encryption state.
Connecting to SQL Server From Linux
Connecting to SQL Server from Linux requires the right Microsoft ODBC packages, a Kerberos plan, and certificate trust that matches the server name.
SQL SERVER – History of SQL Server Database Encryption
Michael Coles, co-author of Expert SQL Server 2008 Encryption, let me share his history of SQL Server database encryption, starting from SQL Server 2000.