Anyone running a cloud hosted Radius server for solutions like NAC?

Looking at Portnox, and we were very surprised to find that their solution defaulted to just sending RADIUS in the clear to their cloud hosted server. tons of internal networking information in this traffic (names, IPs, port #s).

We're switching to RADSEC for this design, but it made us wonder: How many customers accepted this default and have no idea what they are broadcasting to the internet?