Once an end-to-end, encrypted, connection is established between a pair of peers then anything can be sent through it. The establishment proces is generally facilitated by a server of some description so neither peer needs to allow inbound connections. (I’m a long, long way from being an expert on this and happy to be corrected - but this seems like network fundamentals?)