WebSSL: Traffic is encrypted using SSL (see disclaimer) between your browser and the PI-Stack infrastructure. However, the PI-Stack operator may potentially see the commands.
My personal knowledge base in a wiki.
An implementation of draw.io in the PI-Stack environment.