Their solution is to act as a proxy between your HomeAssistant installation at home and the public internet. Supposedly the SSL certificate sits on your device and they have no access to your data. I think this is the right way to do it