nginx is a very capable web server by itself, the reverse proxy is just one small part of it.

Without more information I'm just guessing, but they're probably running the whole thing on-device, the CPU in that phone should have hardware cryptography support (For AES), but even ChaCha is pretty efficient in software on chips like that.