Correct. The transistor tab is live.
There is no need for that much heat sinking. But if you must, you could purchase a TO-220 insulating add-on with a mica washer, and insulator for the screw. The small heatsink I showed fits on the board and should be sufficient. Even more so if you can...