[chgs]

Yes it is a choice and security is a balance. You could encase the server in lead and drop that to the bottom of the sea, but that would be an extreme on the “security” side. You could do away with user authentication completely, that would be an extreme the other way.

[bubblebeard]

That’s true and I see your point. Personally I do not understand this choice in contrast to an admin panel though.