yes! It's so helpful to make colleagues understand that encryption is not the job of the application, and that authentication is not encryption, is also delegated to a lower layer protocol.
I am truly curious what critics of the OSI model propose as catalyst for such conversations.