This topic is relatively complex, so we created a post that covers it much more broadly here: https://jitsi.org/security