Downloading and decrypt intunewin package

[i5513]

It is docummented anywhere that intunewin package can be downloaded via API MS GRAPH, but not decrypted?

$appname = "XXX"
$appid = (Get-MgDeviceAppManagementMobileApp -Filter "DisplayName eq '$appname'" ).id
$contentVersionId = (
      Get-MgDeviceAppManagementMobileAppAsWin32LobAppContentVersion -MobileAppId $appid |
      select -last 1
).id
$contentFileVersionId = (
      Get-MgDeviceAppManagementMobileAppAsWin32LobAppContentVersionFile -MobileAppId $appid -MobileAppContentId $contentVersionId |
      select -last 1
).id
$url = (
Get-MgDeviceAppManagementMobileAppAsWin32LobAppContentVersionFile -MobileAppId $appid -MobileAppContentFileId $contentFileVersionId -MobileAppContentId $contentVersionId
 ).AzureStorageUri
Invoke-WebRequest $url -OutFile paquete.winintune

A web search show some interesting results, but no one official from Microsoft:

IME debugging and Intune Win32 App decoding – Part 2 – Modern IT – Cloud – Workplace (oliverkieselbach.com)

How to decode Intune Win32 App Packages - MSEndpointMgr

IntuneWin32App/Development/Save-IntuneWin32AppContent.ps1 at master · MSEndpointMgr/IntuneWin32App · GitHub

What do you think? We need to know which content is uploaded to our Intune deployment

Thank you!

PD: Bonus point, why is it?:

C:\> Get-MgDeviceAppManagementMobileAppAsWin32LobAppContentVersionFile -MobileAppId $appid -MobileAppContentId $contentVersionId | select CreatedDateTime

CreatedDateTime
---------------
01/01/0001 0:00:00
01/01/0001 0:00:00
01/01/0001 0:00:00
01/01/0001 0:00:00
01/01/0001 0:00:00
01/01/0001 0:00:00
01/01/0001 0:00:00