Asset Cat.enc is encrypted (AES-256) & decrypted directly in RAM.
Open DevTools (F12) → Network to verify no plaintext .glb is exposed.