accessToken is encrypted on sfdx force:org:list --json, but not on sfdx force:org:display -u ORG_NAME --json
Example:

1 - Execute sfdx force:org:display and check the acccessToken is not encrypted. You can open postman and issue a request with this token.
2 - Execute sfdx force:org:list, get the same org from the step 1, and check that the accessToken is encrypted and does not work on any request.
The accessToken should not be encrypted
The accessToken is encrypted when running sfdx force:org:list command
SFDX CLI Version(to find the version of the CLI engine run sfdx --version): sfdx-cli/7.75.1-5585088c75 win32-x64 node-v12.18.3
OBS: it is not a version issue. I tested on 7.47 and the result is the same.
OS and version: Windows 10
This should be fixed in the new open-source version. You can try it early, here: https://github.com/forcedotcom/cli/issues/835
Yes, I confirm it has been fixed. But I had to install the plugin. It would be good if you could ship this to sfdx that everyone is using.
That's the plan. I just want to make sure it's fixing everything we think it is and breaking nothing.
@mshanemc good plan! thanks for that
closing, because plugin-org is shipped
Most helpful comment
That's the plan. I just want to make sure it's fixing everything we think it is and breaking nothing.