Yes, that's two applications instead of one...

That's precisely how the OSI model works. Every layer is written/read by a different process, and exactly why you can't ban encryption. So long as a communications channel can accept arbitrary language, that channel can accept anything expressible in that language, including coded messages.