Well, putting in place authentication can indeed be difficult, but making the ELK nodes only accessible by a limited set of IPs (preferably private ones) instea

Well, putting in place authentication can indeed be difficult, but making the ELK nodes only accessible by a limited set of IPs (preferably private ones) instead of being directly public facing should reasonably be expected.