Our Firm agrees.  In looking at our Data Security Plan we see DMS as an area of concern and would strongly advocate for access to this product to be controlled via password and multi factor authentication.