See my peer response. I would imagine all traffic from the Mac<->other device is encrypted. You're responsible for securing the Android<->Mac link.