Maybe the NIC already supports hardware TLS/SSL offload? Then the bottleneck would be elsewhere.
Short of doing that, you could test using one of the aes256 ciphers for ssh/scp as they are hardware-coded and much faster than the default cipher chacha.
Saving some notes for later:
Well, I agree with the author, but if he’s happy of “having it” 
I’m happy with 50Mbps, even though here and there operators offer me <40 chf/m 1Gbps fiber, why would I bother, it’s basically the same. They need to give me a static public Ipv4 in that price so buy me
I don’t have anything that can go faster than 1Gbps…
50Mbps or 50MBps?