I thought Telegram does encrypt chats, just that you have to enable it rather than it being on be default. Is encryption only available for one-on-one messages?

It’s only available for 1-to-1, yes. But why would you rely on a service that hides the option to E2E encryption so well? Next step is to silently remove it.

Signal is private by default.