It’s a whitelist. Only phone numbers you explicitly allow can send commands. Alternatively, you can choose to enable a pin that must be given in order to execute commands.

And also track your location

You can configure which features you want to have enabled. I have this running with just the gps locate functionaly enabled in case I misplace my phone or my wife wants to check to see if I'm almost home yet or something.