You would be right if the Solr admin page were the only administrative interface. It's not. You could send delete queries, create additional indexes, etc all wi

You would be right if the Solr admin page were the only administrative interface. It's not. You could send delete queries, create additional indexes, etc all without using the admin page, simply by sending http requests to the relevant Solr components. Instead of adding overhead by securing each individual call, they leave it up to you. Or to whichever friendly consultant you decide to hire to help out with that. Wink wink. Nudge nudge.