Production deployment should use OTP/password authentication with HTTPS and rate limiting.