Is web to lead form data submits in encrypted form? If you use https, it's encrypted. Otherwise, it's not. The security is entirely up to you.