I just deployed an ERC20 token on the Rinkeby testnet. The token has some features like Minting and Burning. After verifying the code on Etherscan I am able to interact with the functions and generate more tokens or burn them as I am supposed to.
However I just realized that whoever has access to the .sol file which contains the smart contract could potentially verify the ERC20 token itself, thus being able to mint or burn instead of me.
Is this even possible? If not, what am I missing in my logic?