Probably you've right. I didn't test it in that way and I don't intend to.
All I want to say is it is possible to block unwanted access.