[Macha]

> exposed passwords due to insecure authentication mechanism

Use SSL + SASL auth and it's not any less secure than logging in to most websites.