The same thing happened with the Provoice system. Random dispatch talk groups would be clear for days at a time, then everything would be back to secure. As Rattler said, sometimes negligence, a lot of the time, just hitting the button on the console by accident and not noticing the encryption status. If a radio has the correct keys, the user won't notice if they are in the clear or secure without looking at the screen. The dispatch supervisors are responsible for making sure the system is secure as well as the RSM. I don't see them opening up the dispatchers full-time. The last I heard from a colleague is that all the agencies that PD has granted access to have their keys have them. I heard Northside PD acknowledged by the Prue dispatcher when it was in the clear and North talking with Castle Hills officers when North was in the clear. Again, these were a random couple of days worth of clear dispatchers.
SAPD was very big on encryption even before the new system. They chose and were on the EDACS Provoice system for so long because it was unscannable until Uniden provided a Provoice upgrade for their scanners. Now, they can control every radio that monitors their channels with full encryption. SAPD even encrypts their e-tone for code three calls.