So this is how I understand it. Hopefully I can explain it correctly.
Everything is still encrypted like normal of course. Dandelion only protects you from malicious nodes on the network knowing what node broadcasted a transaction.
But your ISP would still know you were the one who broadcasted a transaction (they still wouldn't be able to see amounts/receivers). Does that make sense?