What is the current state of encryption?

(Not sure this is the correct category, but couldn’t find a better fitting one.)

I would like to use Home Assistant with ESP8266/ESP32 devices and communication among them should be encrypted.

From what I can see, that means I have to use Tasmota, and I have to build it myself, right?

ESPHome has an ssl_fingerprints option in its MQTT configuration but that doesn’t seem to work and they seem to have some trouble making it work.
With the “native API” of ESPHome the ESP is the HTTP server and supposedly that makes it impossible to support encryption? Running an HTTPs server is possible on an ESP8266, so I guess it’s down to the tiny flash that most devices have.

Are there further alternatives I have not considered? What is this “homie” thing, is that a fully working firmware for ESP devices? I’m asking because it seems to use this PangolinMQTT library which appears to be a requirement for making it work.