Looks like they don't have much in the way of security yet, but they're working on it: http://meteor.com/faq/does-meteor-have-an-authentication-sys...