How is it that I don't need to enter my password to decrypt my phone?
The data is encrypted by default, but if you don't have a pin, or code to unlock your phone, then it's obviously not secure at all.

If you set a pin, password, or pattern lock etc. then you will need to provide this when the phone boots, to decrypt the drive.