To add additional security you can password protect (if you have the facility to with .htaccess or your host provides a vehicle) the includes folder inside the flyspeck folder or whatever it has been renamed to.
Then when they login in to edit the page users have to login to the folder first then put the password in for the editor. This only has to be done once unless the browser is closed.
