How is a stratum connection secured? Does stratum mining use something similar to "https" to secure traffic between the pool and the miners?
No, all traffic is plaintext. The connections are hijackable and attacks against this have occurred in the past where ISPs redirected hashrate to themselves.