For the initial release there's no problem on provide the export/import feature not requiring a password. But, for the further release, we should protect our installations with a password configured by the admin, into this way we can encrypt/protect the data.