In the default config the sync data is encrypted end-to-end with the user's Google account password. However, there is also an option to share browser history with Google for telemetric reasons, and it's on by default (regardless of sync encryption settings)