It is almost universally hooked up using ssh tunneling so ssh takes care of the security boundary and ssh is well trusted.