Good question, but I think the DHAN team is the right person to explain why they have encrypted the payload passed to the backend during API calls (as shown in the image below).
I don’t have the right to disclose DHAN’s encryption/decryption logic.
But if your concern is about data security, there’s nothing to worry about. Still, if you want to verify, you can trace all data transfers from/to tool using Wireshark or similar TCPDump tools.
If you don’t want to rely on third-party library, you can also automate the process with a Python script, though it will take some effort.
Also, the video I shared was only to demonstrate possibilities, nothing more is possible beyond that.