You don't need the TLS Record Layer in order to do authenticated encryption.
1. Something to delimit the boundaries of the message. 2. Some way to determine the nonce.
OTOH, the TLS 1.3 record layer is barely more than authenticated encryption,
