Security: you can use scp, ssh and other methods to transfer files, and of course you can also connect directly through socket. So it should be a tcp connection. You can pick up your bag and have a look.
In guardian mode, rsync listens on TCP port 873 by default.