Technically they still let you see all the rest of the session data in both the "orchestrator" and in the sub-agents, including all outputs and stuff. It seems for now they only encrypt the prompt from the orchestrator to the sub-agent. Still, basically make the entire sub-agent and Ultra thinking useless for me and I'm guessing a whole lot of other people, who need to be able to introspect things when it goes wrong.