It was a bug in iwinfo where it failed to report the mesh encryption even when it was present. This was fixed almost 2 years ago, I do not recall exactly when. Luci uses iwinfo to get the mesh info so should be ok.
However - you MUST have at least a mesh version of wpad, eg wpad-mesh-mbedtls for an encrypted mesh.