but it seems like if I use that or just

getPayload

the results are the same, and in the client component it's still calling initSync?

If you are not using SDK encryption, then they basically do the same thing under the hood (they both work with initSync)

I was just reading something about that, so if I use encrypted flags?

you can still use them, but you must pass the decrypted payload into

initSync

. See here: https://github.com/growthbook/examples/blob/1ef196a88dfba58362573a06ecd5404e70ceeb26/next-js/src/app/client-optimized/page.tsx

right

encryption is an SDK Connection setting and applied automatically when enabled

but no docs describing what that is?

I don't think we have a SDK Connection specific doc (which would cover encryption and other features). Will make a note to audit this and add any missing docs