As long as you have a password it's fine - it will ask for a username and password whenever someone tries to use it. Coupled with the firewall, by default, being on should be secure enough.
If you have a firewall on then they won't even get a username / password prompt. Basically it has to be setup correctly to use it.
M.