My wording was a bit poor.
For the rclone.conf
1st entry is your Google Drive which is your starting point and where you configure the client auth/etc.
2nd entry is the cache spot. The recommended method is to point to a folder inside of your Google Drive.
So mine is GD:media, which my media folder is just a normal named folder and no encryption. You can call it whatever you want as most folks have an encrypted starting point to store their media.
My 3rd entry is my encrypted mount point which points back to the type=cache (my #2 in this example) which encrypts all my media/filenames/dir names/etc.
My mount command mounts uses the 3rd entry and that is what is mounted via the rclone mount.