AD is plaintext, yes. The point of the AD is that it is implied from event context, so kind is just the kind, and scope would be say the d tag or community ID or something else that is already plaintext.