Bdtyktl

I followed this tutorial to set up the VNC server in my remote machine : https://www.digitalocean.com/community/tutorials/how-to-install-and-configure-vnc-on-ubuntu-16-04

I am able to successfully deploy the VNC Server and take the remote out of it.

I see a point in this document,

we need to create an SSH connection on your local computer that securely forwards to the localhost connection for VNC. You can do this via the terminal on Linux or OS X with following command. Remember to replace user and server_ip_address with the sudo non-root username and IP address of your server.

ssh -L 5901:127.0.0.1:5901 -N -f -l username server_ip_address

I have two question here,

1) why do we need to create a secure connection here in connecting from the remote machine where VNC server is running to my local machine?

2) I need a way to connect using the remote machine username, password, IP address, and port, I need to avoid the step one so that any user can simply access the remote VM using just IP Address, Port, Username and password.

Any help is appreciated, please help me for this.

Thanks,
Harry