Target Encoding Without Out-of-Fold Logic

A categorical feature is target-encoded using the full sample average label for each category, and then those encodings are used inside cross-validation. Is that safe?