fonoster/rtpengine question

[Milad]

I'm looking at the file https://github.com/fonoster/rtpengine/blob/main/.helm/templates/daemonset.yml in the fonoster/rtpengine repo.

I see that the container uses hostNetwork: true. That means it listens on the ports of its host. There is BIND_NG_PORT for the management of the RTPEngine by software like Kamailio. But, as far as I could tell, RTPEngine doesn't use any way to authenticate incoming connections on the NG port. Isn't this a security liability?