When using web3 js to connect to ethereum private network, I just configured the http provider of the web3 instance to connect to the node.
how is just info about RPC endpoint sufficient to be able to connect to a node.
shouldn't there be some user authentication in place? because with just a RPC endpoint we were able to do what ever we want with the blockchain?
Is it just like that ? or am I missing some thing here?