That's correct. The DatHeader isn't encrypted. Also, the record structure is intact. I.e., it's possible to extract individual records as well as see the record header and checksum. It's just the record payload that is encrypted.The header seems to be the same but maybe inside it is scrambled then.
This is the same kind of encryption used for encrypting the .txt created by the Fly App.