You are correct. Our private network makes SSL between your app and the DB unecessary.
fly proxy and fly postgres connect both create the equivalent of a VPN connection to your private network. This is also Wireguard, so traffic between your local machine and database is also encrypted.