Connections are also encrypted with the wire guard protocol using a per-device private key.