HI @Nick Haywood ,
As per this Azure document, the logs are encrypted in transit. To ensure the security of data in transit to Azure Monitor its recommended to configure the agent to use at least Transport Layer Security (TLS) 1.2. For more information with regards to it, please refer this and this Azure documents.