A handful of legacy accounts are still flagged encrypted=true while their
name is stored in plaintext (name_iv is null). The client-side decrypt-
migration only clears the flag for accounts with an actually-encrypted name,
so these stale flags never resolve and keep the user perpetually counted as
"has encrypted accounts". Backfill the flag to match reality.
Transaction decryption is unaffected: it is driven by each transaction's
description_iv / notes_iv, not by this account flag.