What does "FileVault: No (Encrypted at rest)" mean?
It means that the SSD is encrypted by the built-in T2 chip. On newer Macs encryption is always enabled and handled by the T2 chip.
This means that the disk is encrypted when at rest, essentially meaning when the computer is powered off and/or the disk drive is removed from the computer. However as soon as someone turns on the computer, the T2 will supply the necessary key and make the drive contents available.
You will most probably want to enable FileVault. This ensures that your drive cannot be decrypted simply by powering on the computer, but will require your secret password.