Is sslmode=verify-full enough to connect securely to postgresql?
If done correctly, it is secure.

The biggest vulnerability would be someone tricking you into removing the sslmode=verify-full parameters from your connect string, or some similar social engineering attack.