I've checked the latest Bitfusion documentation but I couldn't find any information about traffic encryption between client and Bitfusion server.
Is the in-transit communication encrypted and which algorithm is used?
With respect to the 2.0 docs Bitfusion encrypts control traffic, but does not encrypt data traffic.
Actually, for vm traffic encryption there are some restrictions with PVRDMA for GPUhost-to-client-traffic, vSAN for data-in-transit encryption and in Bitfusion client' package Netlink Protocol Library Suite (libnl).
A Bitfusion-aware Horizon accessible Ubuntu desktop might be the way to go.