Just tried the ide client by hand first time and noticed there's no authentication mechanism. So I thought it was a good idea to open this issue to not forget about this.

The folks on YCM/ycmd adopt HMAC for example: https://github.com/Valloric/ycmd#api-notes. I've heard histories of exploitation POCs there before it was added.