Port 25 is used to receive emails, but postfix/qmail do support StartTLS encryption on this port since 20 years ago or so.
Yes, the encryption is optional (smtpd_tls_security_level=may), so your server may still receive some emails via plain text.
For sending, your postfix will use a random...