Thanks, I hadn't realised that. Looking into it, it seems PGP creates a shared symmetric key and then shares that key using public-key, which does seem like the most obvious way to do it.

[0] https://superuser.com/questions/554513/pgp-encrypt-single-me...