No, you don't need to worry about this because the value in a marketplace is not in the code. You do need to worry about passwords being hacked, though.
Why source code is not the value? If they could hack it, then they can just deploy the same code in a matter of weeks?
oh, any suggestion on how to implement the admin backend access? Currently my admin access is just a subdomain, which I think is not secure access (although it requires admin credentials to access it).
Thank you.