Just in case you want to open up your Redis instance to the internet?

Sometimes I think people like antirez add these features just so an article isn't published proclaiming Redis security to be broken because of no password authentication.

We use the authentication in our apps. It's simple, and as Zephyr suggested I wouldn't recommend using that as your only security - it's not our only security, just part of the overall approach.