They're using SEE, see https://eighty-twenty.org/2018/06/13/mendeley-encrypted-db
As an alternative it should be quite possible to produce a hook using Frida or similar that would disable database encryption on the Mendeley side so it can be imported through the usual channels. Not pretty though.