I read this at the docs:
Database Everywhere. Use the same transparent API to access your database from the client or the server.
Secure your app by removing the insecure and autopublish packages:
meteor remove insecure autopublish