This is true. I was pointing out that eCryptfs is reading files off of another filesystem, and presenting the decrypted versions of the files as another filesystem vs. something else that can read directly from a block device.