Secure way to use azure servicebus in on-premise insecure client app

Question

What is the best way to use an Azure servicebus connection (string) in an insecure on-premise application?

I need to expose customer data from the backend to the on-premi