There's also security through obscurity. If you use "requirepass" AND rename the "auth" command to something only the client knows (yes...you can rename comman

There's also security through obscurity. If you use "requirepass" AND rename the "auth" command to something only the client knows (yes...you can rename commands in redis), then you could potentially "partially" secure the instance even more (although someone can basically DOS your server attempting to "auth").