The Airflow docs actually state that setting the encryption key to an empty string makes Connections fall back to plaintext.
But does the same thing hold true on AWS-managed MWAA?
This post traces that question from Airflow’s native Fernet mechanism all the way to MWAA’s reserved environment variables.