From my understanding of the WebRTC spec, as long as your TURN/STUN server is trusted (which it is, the CA and relay are both run by Mozilla) it doesn't matter if the network is untrustworthy.

WebRTC by itsself is not MITM resistant