Syncthing encrypts the data, so it will be encrypted when being transferred. However, Aegis can export the vault into an encrypted file, too. So the vault file you will be transferring over an encrypted channel is encrypted itself as well. That means that the vault is secure even when at rest on some device.
I especially appreciate that the graph is designed as “Linux” and “Other” instead of “Windows”, maybe “MacOS” and “Other”.