did you look into their spec? perhaps they used the updated openpgp standard which has authenticated encryption. or perhaps they just sign everything.

and it's not just pgp with email, it's more akin to an overlaysystem.