Literally EVERY other resource on the internet requires users to establish a user account, verify it, and then log on using those credentials to access the resources. If you're looking for opinions, I'm 100% for it! Too much is at stake should a bad actor gain access to the backend resources...