In reply to harish.

Your are correct, the SNI is not encrypted. It is sent as part of the client hello and is still in clear text in TLS 1.3.