@andrewh You can actually mitigate that in many different ways... for example if you have real fixed IP Address you can make the suitelet only respond request coming from that IP...