It doesn't, no. Whoever told you that is wrong. Bad actors can get TLS certificates issued for their phishing sites just the same as you can for a regular webs

It doesn't, no. Whoever told you that is wrong. Bad actors can get TLS certificates issued for their phishing sites just the same as you can for a regular website. Encryption is for everybody.