Insteon is still an insecure and unencrypted protocol, just the new homekit hub is 'more secure' now, controlling insecure items.

You can also install a general homekit proxy with a general nodejs server called homebridge. That homekit proxy can control anything with any kind of security.

So at this point it's just another proprietary standard unfortunately :( Might as well call it another MFi program.