The remote control appears to use a third party relay, and I don't see encryption mentioned.

I really want to use this, but I definitely don't trust a vibe coded relay to my shell.

Fair concerns! The third party is Cloudflare, and it is encrypted