I don't use it through a website link either, mine is just for private monitoring of a radio station's output by the station engineer.
The only suggestion I would make re controlling who can listen is to define firewall rules, either on your PC or modem/router. You could restrict it to known incoming remote IP addresses, though if a user had a dynamic IP address, then you'd have to change the firewall rule every time they were allocated a new IP address. Fortunately, in my case, the end-user has a static IP address.