It is possible to protect your system by changing the default password and username to something difficult for outsiders to imagine. Make sure you don't share any private information in the username...