I would also wrap it in a WireGuard tunnel, especially if doing it over the Internet, unless you want your fellow hackers intercepting everything you're transferring.
P.S. I love WireGuard, it's easy to set up and allows you to use protocols with no encryption (or bad proprietary encryption) securely.