True - however, the component used here should allow the secure connection on port 8883.Actually you don't need to do this.
The config passed to the esp_mqtt_connect needs some slight changes (the verification key needs to be set, and the broker address needs to change to connect to the secure port) - I'm hoping this will prove to be straightforward (famous last words?))
Martin