it's not impossible to implement encryption elsewhere, gemini pretty famously requires it

Of course not, the context here is ATProto which literally stands for "Authenticated Transfer Protocol", and it uses other protocols than just http/tls, so of course there are other ways :)