I wasn’t aware that cloudkit encryption was independent. This support page suggests you need to enable ADP to have E2E encryption with cloudkit.
Third-party app data stored in iCloud is always encrypted in transit and on server. When you turn on Advanced Data Protection, third-party app data stored in iCloud Backup and CloudKit encrypted fields and assets are end-to-end encrypted.