MQ message travel over wireguard so they are encrypted in transit. The payload of a MQ message (with one exception) is also encrypted so that the payload can only be decrypted by the node for whom the message was intended.