I'm kind of surprised they didn't do that already. So they were holding our data in plaintext before? Now that should be the news here.

As for the author talking about PRISM, it makes no sense here, because this wouldn't affect PRISM in any way. For Google to protect its users against PRISM, they'd need to give them a way to easily encrypt their data on the client side, before it gets pushed to their cloud.