You can white list specific IPs though
This is what I mean, if this list can be dynamic or modified at runtime with an API.