It's probably being run on an enterprise-managed mac. The only person who can be locked out via encryption is the user.