Remote desktop privacy: what a direct connection protects
Pairing, encryption, and physical access: three separate things worth reviewing.
Direct does not mean trusted
In a local Nubo session, the desktop travels between Mac and iPad without a Nubo relay server. Bonjour helps discover devices; it does not establish trust on its own.
A LAN can contain untrusted or compromised devices. Pairing and encrypted channels remain necessary. Another product using servers does not demonstrate that those servers can read its encrypted content.
Protect the saved identity
Approve only pairing requests you recognize and verify the code during initial setup. Saved credentials allow reconnection without repeating pairing.
Protect access to both devices and remove authorizations you no longer need. Not requiring a Nubo account removes one dependency, but does not eliminate risks from a lost iPad, malware, or physical access to the Mac.
Check the physical screen
A visual curtain is not the same as locking macOS or physically powering off a monitor. Verify the result on your equipment before using it in a shared space. It should not be treated as a guarantee against someone with physical access.
Also review lock-on-disconnect options. Away from home, use a properly configured private network and avoid exposing Mac ports directly to the internet. Consult the privacy policy to distinguish session traffic from downloads and distribution services.