Currently, Memfault is one-way so it is not quite like having JTAG access to your device from the cloud.
But it still needs to be secure, and we typically encrypt all data going from the device to the cloud (some devices, sadly, do not have the ability to do the encryption).
Edit: removed double negative.