Implications of querying OrientDB directly from front-end

Question

Give that OrientDB exposes a REST HTTP API, and that it seems to have quite a few security features, what are the (especially security)