Yes, RAW vnc is not secured but in ACE we use encryption layer using wss (web secured socket protocol is similar to https). So all the communication between the server and client is encrypted.
Client authenticated only if the client is part of the trusted group of ACE