Ken,
You can (should) set an ID and password for the remote RRC.
If someone figures out your IP address and port, the most they
can do is to view your status. As soon as you click on one of the
lower menu items, it asks for your ID and password.
Of course you should change the RRC port from 80 to another port,
just as you did on your power switch
73,
Mitch DJ0QN / K7DX