I was hacked by a VNC user!

[Stephen Fromm]

> We don't advise use of VNC Free Edition across the Internet except via 
> some
> sort of secure tunnelling protocol.  VNC Enterprise & Personal Editions 
> have
> in-built session security for this purpose.  All current VNC Server 
> releases
> also support querying the local user to accept connections, which is
> advisable if you are concerned that the password you are using is weak or
> widely known.

But if I don't type any passwords, etc, once my connection is established, 
what does the additional protection actually afford me?  (Meaning, again, if 
the datastream itself doesn't need to be protected, but only the password 
and ability to connect to the server.)

Thanks in advance,

SJF