Modern Android versions are encrypted by default. Though given weak/no passwords by default I believe it only helps if you remember to factory reset first.

And if it's damaged a reset or wipe may be impossible for the end user.