[meteor dev] I explained a bit more of the philosophy behind the Meteor security model in a Stack Overflow answer: http://stackoverflow.com/questions/13331836/meteor-userid-is...

And of course, http://meteor.com/authcast if you haven't seen the 0.5.0 screencast.