So, if I know the URL of your important note (or stumble across it via trial and error) and you haven’t password protected it, I can hijack it and secure it with my own password? Or delete the text, or make material changes to it?

The password option might be a good thing …