I believe what he meant by that was that without encryption, you are aware everything you send might be intercepted and read by a third-party, whereas with a flawed encryption algorithm you might send sensitive information under the wrong assumption that it is safe from attack.