If security is a concern for you, you have most likely stopped the Exchange admin center from being published to the Internet and disabled access.