Most Cisco devices will support scp it's typically enough and you can do public key authentication.
SCP and SFTP rely on SSH to provide security ... yes it should be enough for most environments.
As a side node, encrypt passwords and keys, even if config is leaked you cannot get all the sensitive info.