The following documentation could possibly be interpreted to mean that the oplog is not encrypted when encryption-at-rest is enabled. However, my understanding is that the oplog would in-fact be encrypted if encryption-at-rest is enabled.

The particular phrase is: "Encryption is not a part of replication" .

https://docs.mongodb.com/manual/core/security-encryption-at-rest/#encryption-and-replication