The GDPR requires organizations to incorporate encryption in order to protect consumers’ data and to mitigate the risks associated with data transfers (such as data sprawl or cyberattacks).
Think email & phone number, but not messages sent by user. So every message is anonymous.