It’s worth noting that e.g. the Go stdlib has this hybrid construction built-in via crypto/hpke.