It is driver dependent if it uses cryptography when it "talks" with server. Some drivers I use (Informix, Oracle) do not use any cryptography, while others (PostgreSQL) offers SSL.
Of course you can use VPN with encryption and then transmission should be secure.
Or you can encrypt data in database.
But those solutions are not ODBC dependent.