> has absolutely no authentication before allowing control of your computer via a publicly available webpage.

It's less than 100 lines of code, not hard to see exactly what it is doing. It doesn't dial out to a remote server, it starts a local server. And unless you're running a computer that is exposed to the public web, that won't be "publicly available."

I'm not saying it's secure, but let's not immediately jump to conclusions. It is what it is a little useful utility, albeit small and immature.