TLS doesn't necessarily mean everything is encrypted with FTP, because data and control channel have to be encrypted independently. See for example https://sec

TLS doesn't necessarily mean everything is encrypted with FTP, because data and control channel have to be encrypted independently. See for example https://security.stackexchange.com/a/115565 https://security.stackexchange.com/a/115565 or https://en.wikipedia.org/wiki/FTPS#Secure_data_channel https://en.wikipedia.org/wiki/FTPS#Secure_data_channel for more detailed explanations. Most of the time both are encrypted when configuring TLS, but it's not as easy as with IMAP or SMTP where you basically disallow all commands except STARTTLS.