It's still encrypted. They would have to man in the middle and hope that the user has not already accepted a cert. Exactly like most ssh servers.