With Plus and Pro, the apps reach your server from anywhere without router changes, through the Silux relay. That connection is now encrypted end to end with your server's own key, and the apps check the server's identity before playing anything.
The relay only ever carries encrypted data. Requests that aren't encrypted are refused.