They would have to guess the roomcode and password, it’s pretty difficult to brute-force.

I’m planning some sort of auth system, but not sure how I wanna do it yet.