Having separate read and write permissions is entirely orthogonal to having encryption. That certainly would help (assuming the compromised system didn't need t

Having separate read and write permissions is entirely orthogonal to having encryption. That certainly would help (assuming the compromised system didn't need to have read permissions), but you don't need encryption to implement that and adding encryption doesn't imply that you've done it.